<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="11485">
<package pkgid="6925706ae56cde4c6211b428a289fb2cc0f4df8ce23e5615f7be548791b0ca39" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="8dcdce738f2ea1bf466e436e1cfd3153633180a6820f529b8b25e4ccb9f7cecd" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="175041d9f187e32f5f8cb48463e0b19fcad07520be4e04ca579dbd2346e0028b" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="f04612f3c3fa5fea8017d521a18e83c7c2f00ce93ed98d09589283492dbd9169" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="35a1fbfd4d0bcc4fc2afe8b92f2fe6e7215bf2e42f07ac21d2008a6653983c3c" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="3e3f75fa9fa8e590b8a3595ccb4fd227e0fbe288d1c32c08fb1953649b32ebf2" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="e58eb50bc96e61fa02bd9c4bdb0c93a8528f861eb302828c07e583a1f4c52374" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="8da259214538a5f0f0b7150748bbb3f6ab26ed3c4252507de8afa400b7672536" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="64e0aeb721d4b9891348369d57754c8755c0a5a3fa029d684d976ca162b43720" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="a3c3956bbff5b95d207811d642f302aefc1b105da658206a8f8f1f0ee2638fb9" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="3dd89f4a0690cf9b5555276dd3082e3b459399f17a427b0a05334f6c2931ba88" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="4172cf0c7dd1f31fdb6138bf9ea35e7a80e131b5084607ed2d61e8f24cfc83a6" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="1d874f4350c6150d0587f2047917accd46407faec88f978847962a90ce3ff92a" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="0586a155440120302c2166bea9f45c779f6474ef70778dd40849e41144b12e44" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="964cabe77e35cfdc13e00fd52e1dbad6611cf9f5f35595cb7d2f5fa96e1050fb" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="1366ee61aa4a581e80a9861d268a980b7425534831468e326a6fdd1c4aef0851" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="d8819e61e1afffe526b7a19654d0d50bc047ba48502682ea0a58b8697f1e8079" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="ffc79f8581429d82b6f186ab60f5705be069c0b22dff9d1aeb0f1f3c923fc0fe" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="136b06692f2faf8f50d755f233b7d78a9e309f9cf3a797ca1067ad3479885aeb" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="b935726d81a03ab4344a737abd117a8d8c4bea16a532c0f24d73d9dbe3e6c6f4" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="5bbccbedd32c26059ca2d1532fa5cdf1e1e7911f659a9b87e38c5b8136798d47" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="84155dcf4b64905b4552dfa6b2c3a27b1fd82033c2d55c1d2962675d633d50f6" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="f17d6770253a790f468b17ed0558f5d811de15ca30fd3ba761ac7b0317ea1990" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="8a7776552e61ece8be4c0b59c322a3b7cfd0c131c5c81147a0d831588a8a15b9" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="910d77055c6e2afc1bbae9b735b21ae53eaecd61d6fad1b6594e6077f86ec3a5" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="ad36f0ea2799d7bf5c94348aad3ed7315f65669c8ab2b3771ff5b8f0ea961c50" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="79c3f82fea8767c9a4447ee5221feff626b92baa09dcf223883c8117f5b844ca" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="42e3ef4c2031b9dfd00ce8d5571d0003a6474cad7127acfe220b7a7691c71453" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="be22c58509faa40fe512bc92e74acd1bbdf07645a74e2620acc80a405b6df87b" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="e4d4d428830f5ccb8b9bfc54a73c20af6805df0e98a8b8fa86dd7c20af6b4ccc" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="758fdd02fc2c81537ae0cccbb2850e6ac0d23ac1171f49e259cd0bedbec7ba4b" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="3f86ee276ed935f42beb07f95be7f0dfaec78a33a8084198688a495a5c913870" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="853aa20819f2a7fb5c06d3963587728f8eedf20f4cc56d6880b3c94c8ca88be0" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="bfb57402e0e11ea54ee1b9415365b0089a294ff4f76ec16914a3dea37a514ef0" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="29e47efa78b9120ca92ebf5c3bda3f6b2ba706bfdef619806417a9fbbe9e53b7" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="8a5904a58c1d80ccaff418874b635e8112d7daaa78b7b4ac7eb0afa727baa219" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="1fb21df6206468e4438cd6394b79f376bcd96df3a5f118b49fde5fb4d9d603ab" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="7d284368465d2373bd24d7a4f1d52580866368742afb671bb531c9a4811820db" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="c8f8bcc0243aca4ecc57111c8cae822f2b08ac7aab0d6cdf79d0f970545a5671" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="75a49733a312d37eb903c90abb0f28733fe5c50ea52a8f602b94c706d4522476" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="b5846b47b33c86d513a42cec2fe3a0c48ba150e051273a2496ce60c3b9738416" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="d81afbce9498ccca60bed989f565144e499dcb50461ca852266b6a148f0817d4" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="2464ff1a198d28ab7c03c5fb39130393cb228cee48d9180a14f662537276df8c" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="cecd6ab396c6a564fbcebc3abf3294c3c88225e8271e7bc23fec5b38bd40ec16" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="0528594cc9fa754c28cc5e9a18671042e5584a8f540f441124fa386e6f23db8a" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="d11d428caa7b45b4a63ac3c041370a93d640424b220f01076a5fa65885b17fa9" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="f025307e138f18e87f7b177b70147e812537128dd4326c4e1713053f0e943b23" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="1d02f57003f4a46f8eff0d7d0331a3f0f948e9f6baea942e709dbfc925a26430" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="1c6e8428d78ca4edeb06f36d511dd1432bb5c0d7e5ac7ab26e3d382ea7444635" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="7a91e3178925c4a890e2ddad6512b940bf1cff3c03887f8d169c2829df0cc061" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="e13be0a6410395ac8cdf743af2a29f114969f168e8396fe5d9d5020704d983f4" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="a34d3eb3b3a97072a7f90654e25234562c001c094ebcae8fb9fc43a6dda56a9e" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="3a4b4a9622346dc3127669754a6d21670359e50f0516f38d34c5d64d1d7ef1ee" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="8b516a2fe816f97f66e494a26c09f4c4c1354fba64f0b81a3f288652c2ac0954" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="6ab98f81ecc6f52730a9949b185d27d20895b74f37b87d45eee70dd6b2fa0885" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="109e288be357f4f36f7b78b38681ed689affd1905409abbbc40073393e0d24b1" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="2a32c0cfe648e96443fa0067ca9e798edacac677a055b9dfb805a2f1eef3609a" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="df2e246e6e8d4e12f2048b004bbed10aa7ea562cfe390e1d49e241b0d22e44aa" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="87620aaa17a6dccdb1cd2c5ab8b1c9633eae6182e5ac319c20703857076a3ec8" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="3b9cdc1d65fd60bd9e322d5a88e02b415dace54debea8380eb2c543cb77c9d0e" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="f841be69aaba202736b9566b229b7239c7f0a9580b06d727223308d422e836e5" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="08dd96b0583a2bf5115384f151e32005225b271a8ab032ffe6ebe7513baf4a5a" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="78b63427ff6f4b4cb7c5da2c1937c446a8f520499f6ab5e50ea0f4c7b7e0285f" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="4c0deafa94caf11172a28c2edbc36761397567c4f6bf77ce0ad64df250fd33a8" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="5bbd277699bb5289e87e83607f40d25ccb1c541fd0c45aa8a3b0f1ee09b020d5" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="810e2ce248e6b44c30aa4eadc83bb690bde56abee2751b92b984e9667de9e03d" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="fe7131664f958488e6494e361847bedb1275cba91e456528248ea1bf7e870a8d" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="bdfe7102224c4c89ccdc5a4dc58c7d6128ac38c16f88a86f5fd022273c46389a" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="3b86ada7277a2406551bbd1045cda39f33496f3077362c6baa94e2e32cbc3b99" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="8ae39a4a1962b3a1756403548f81193ea55de88351b9409c724fdf2b1d4491d3" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="3b3074ce2385ba6c13b3b000c05d89091e7a091bd55f264223dd2a11530f86c9" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="7bd400e90be18ce5f2d69c513c8e5509eaa32d2aa67528ae67deb586632abb56" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="a2449554bc4b0dd52cd6b5d9e6da3b8186f6b30bd61a8afcce92b9aa78448a25" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="5a6bcac975cda985f97b261d341ccf0618aac96bbbd3eda60c7deb67fead86e7" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="7399cb43d812ee15258472325fddf3a00fc83d5e408e1e978f1d86a10a6983c1" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="5c7c9a55b7f057a5cf1c241c5dc13f792bfb1a1cb86d23f7cd10720b8566d9c3" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="b3ce29cb1a68400efc49653e0cf21f51547c4a0881b14c344e7150dbfd0fe886" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="3801a932e2b18b3fa098b5df0b14616c71bb5b89ae322822fff253764f481312" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="e11648cced8b87132698f57d4e4f05c72a66342b3787f5fb6071fc55909d38da" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="aab8a5e67f7248207ced2128ed91194dff1ec9eb151fcbaef277eca4b5a39689" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="84f937faca203bf8aef4dd3afc0baf108d5148d8d8142a52d4a4d8dab68c6d57" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="00643f09899989f6e4cb0937aaab528232cddf63a1e6e723aaf954a4ffd08c80" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="b7afd6aa2f48d7c862f4585d8875a0b15f9b419a1cc844973bd65cebd893bc63" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="c3b84396224c224ff72b9072ae94ef2e4b7f71bfbca1f510c9b2ba88b00f5615" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="7069ae83127fdc87f6b8c6a1b02a8264b1766214d368db2202fba9024138a2f2" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="ca34572125e21c9fd9ec82bc84f68c8c9752b118dd7f96addbfee9f5fa5b6a61" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="bf22a583540ed30a0060ff795a19f3920c9dfefb644509ecca2ea919fa1e6237" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="7e903599d5a1e9241896056a2474ede7ec2f2a2e56a56d6c7f79c3e6ed55b31e" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="2f922a0056296501644cfff56eebc56b65693b740a46a1369cde1265ef25f6a2" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="b7814c9c9f4c8d9dc13057a7dd917b95b255f99e002e379189ab7aded0d7d55e" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="4f194fe51b3b7220bc8ed89b2dd66132f915669a97e39c43b36fe3f16827cfd5" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="4eaf5fbcb00dcb4426bc40b8c9ad24361b2fd5dbf1f965a1d850fe87d9c1a5a8" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="b2879404c0af27a10df7dfd5dd1974df48cf4b92ffd268f2e6e2c0e6b95aaa8b" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="a78b10f5cf0089c3f5424b1f11561f0fb806b507ddb342e3a0cc1fea42d8bf1a" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="930d9f3fa9afc083d63f966815c9c903fa898f66d903a3dd1df4c19657f55fb1" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="952c8134f36ae230c03594f119429268b318608916d6aae92c11f93803e66687" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="fedadf8f6e6ed356ea490b47dd378dc15b0cc99b689999ae156fe3bda2772483" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="6064e4399d1cd3dfad10dd051734b632498aa01b3531cd90e71c90e9e354b9d3" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="9d45d92b005b46763b0ffc7ed7b2779c6031a76fa5da2c83aa4729eb7e425422" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="b88ec9c53d7dbc760eee45e6231677a613658edc4db2f668cec4ef6de7306431" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="c52ee99a2367a52f70fe349422b478fcedf6006c782239d8e39936de171fd209" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="aa5cc987956bd11cc57aad227e9fbb6ccff1f6b2031e9be2c0f770d8a3137f8d" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="80bffc0c42b3be57e4036db1612c0680fc634609ca0491b5c115d84eeaffbaea" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="7f5b4adfeb04ef8948fe654c12d2864a63c317abe4432e1d669841a433f5c6a1" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="beaf88a461fd520aa96ada56e32748bc1f3ed96c75fe0bc3b3d1e6f8f784e750" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="ab8466462e8362bbfa1c121487172edd60f6a6aaf66680d34642742ed5aafe00" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="2a0191b0a9b7517dce705bb066d4a9519106ebc5ebdfdd7ba5336453b19f8e54" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="f584af1925da082b8a7c952585056bbe2a5d0208918bfd3caa6143f572279ef2" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="7c5c467f58dc4c78da4ec6e824c94477cdad57a7bff80a62d79831ff292ef767" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="eadc58abd1c054d77ca05bb4e12aa21fdf1307bc2ecbdec7bf23b2a4b9568d38" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="505c12a3e64631eb840581db5a9e09341c5b594354add33388edc9736fbd6cee" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="7719d1b6e6621cb2f24eb9b2f0807ce1912211a7c71fd061fa37fe4bb0dd9f82" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="773091238a4aeba5f28eebdb8b12dd9647bd436acb48798ec3cc4334782a9fce" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="9db8585634ae048508b278b18a03d42be1a5890148f19605c835d8e6a8a58495" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="d5c6eda345ce7786e6c90ff2595f8ec756c2a967ccfe53694405ac96c17d5732" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="450f3f2f429a7a2ad4864b6fb395912d93b48d891aac2bab96ab5d88a1008c97" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="71ed54e72358d94b891a733bf7d67fe99368c8efc04bc0ccad730a0c9e72fd86" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="ee8070abbff1918c0f26f9a0c56f99d9819bb982f453f4781acfa7ebacfc3d7f" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="60b82b5e8f363a290fc65ce56b632139291b28c08da1f134e27eb130bf66da0b" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="383ad9360a5190377028e59161a679558f6b24a373f444b1a5d6dd143b8c0bfe" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="3e94e05695dfc0db86d06500a13f6af4b8dc77822c9ef6c4de17c668b43eefc3" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="01c57842ae5929cdf633110ab9ed7fe06e1faa604b164e923c2078f70bf1739d" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="d364b1ce0359bf48aa0d4af4f1576325e06575a3d7f2dac49dd7b7b22c7fa206" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="6f064f41bbfac1c4c2fac8dbe729822e1a1c6ed347991c8f98d73ec45b9405b7" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="3eccb86fa28b9861011c7c2e6f2657a02c4e81445f5bdba42b22df6b23d294d0" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="ab791c59378925423665c8594eade8dd3a34da7c7e9fa3b61a1772cba219e133" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="e55792dd7b4ca525a3a439c24e8239a23b859ed0fd953ca2c63e244e243ac52d" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="8f7a00564ac497eec48d676be91413fa3e2c615d4fd8f61303c568ca6be3b1d4" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="38aa0c60fe700007611a0ec7ddf0414d9923be9c54f3316669466284bf7144ba" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="5f1d4243be1d216c77333b5e9f9126d9aad40d7ee4e41a81fbb3ae63beb4ae0b" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="dfadd175ccf634969318dca14f4d252c5f4927fe275c63d8f67ee3bce382e3ee" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="db64b5cb576102fed60a8052b4adabc0b51b0660705c08120d0cc1b89a6bd494" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="6e00247181c1f968170feb665244b752f9b093f51c34cd5adffddbbbf915ac80" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="95e788a919263c4e926dcf6d02ab66f939e2e25e83d0cbd8f2e6f74b0b01c3d8" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="bfb997225b4d9e436c47cf87f52ea544e52d6ea5a2ab56aab66458e470723c4d" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="8973913831085d703a51f5da24ab8c8f8b265cb411d606a0b6255759d4be79c3" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="4c065fc4544aa154620a6f41339215463fdbc45d727a842947173566cb8993b9" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="787000e469d56144ef4335a4459e1fb0e82ef0539196605565d25dae78933b39" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="3c1cbef3090aa541b8aaa9d5223b27ee26df5b7d9881b39283ebe09e6e45e1c7" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="c507466e6dcea99f434e25e60a627330c75b212c446609beae6ffb2ba93b78d9" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="413568d011625b0cf9dba0312c7e5964469c800219fa3215deb53fa82df1465d" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="a3f87c9d95b6fd2911ed76f8802f9450e296f3b209d3cd47e0cf733596f5522d" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="a4f5a8c29c4723428123a22e655fc53bad709c3539fcc5b9be4f0779c81ebc19" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="1eeaac79774d01d158675e1337a2755acde980f88dd3d0cc7f3cd672151e5080" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="ae3188c9cb7fb32dcb1629cb106d3af074c10a473ede7d375984e6abaa185bcd" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="ca19a59b39e95cb5affc91777d82868eeeb0fa0263cfd8e0ce7f0d33aab98d31" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="a18d010266e29ec81343d2199659cce030757c138a85a6086c03bf3a02f337f4" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="b18ce0abd808b060f5fc3f0b672598db89cf87b6ad1a37f963e5222310a01db4" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="b9dbbe94ce8ae8c3a79af0713fa99c7d325377a162d5ab4f6aeb7affb91f3ef5" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="80fe2061862653de3ec41e6c0db3867e35b888eb2be91618a59e91911eab413e" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="f46599110d6845508fc009c4614aa140e52feb6ea3f8e297840310a8857b3a8c" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="170d95282a945a1c633752f86906c6c28fd62fd9b7ac8b9d979fd2f401374b02" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="e3ddb082108260b108f7be019ec717f367e00107bd2c4dd2281ecdca23e5d6ca" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="8a360565e98b9180257843b9eff6e8f6e4fa8fb64b026c71674fbb7e111026f4" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="7537055ce44bf6c024818f773cdc339c0ef16cb2ecf646fb6c08f5271f10ad71" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="8b3046faade63c474c67904a31c95c7a83bc6cba0277fb44df5ffd7f105d3e57" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="a826ec5730e5ec7c590a9807083dbdb95b1cf08370ecdebfc12d9a12e9d3c349" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="cc052a084345a15cfb77f098db6065879b559cd9a4955345e66631894667cd17" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="1b10f5cababb2e050c92db11116bcb5e207eb6506482185d131f629daa582b36" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="902cb89fda47e0ce1034e18bc023ea005e9bf9e416de9a61e40b61111eb07b68" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="14339475d51427e30373bcd80dbe71c3597bac076b59369e55563dc3dad78f2a" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="5679b9f29422895eafc5d90716b7b834ebea08efb0d89178f3ea2d421780013f" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="d4f374b1c2dd0be7ac5500334e3baa921bb32545bbe819be5fb3abf86bcebccd" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="48892f52f5b761df4923795a6043e0282085a16c363c633f81b292c4ea7134c7" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="92ec5c67cbe1158d509d654765d6d947a368e4f77236dce23bec5ef20c93a167" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="442be650883efa41a4c53b6c47d1f5b2d770860713521e77a1e6ef3b114ae387" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="57daaea245b9b40fbc5647989340a90c82251221abcd3e5a3fec4d19bd823f7e" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="20ec8812b6dd63ae38ddc9cc1557416ad4cdc83ce62fc7eded0795bebbcaa856" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="45f1a8bdd372e5c6bafd797fafe92b720447be68ccd6245a67ccc90793425158" name="ImageMagick" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="cfa342d13e80815045b472412bde267db51b39c2fc25d02e3f9e1dbd463d8eed" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="217085a4a522e7301fafc20e3945ce4562889834a3be919027492a9d718adba8" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="19f883f342e2e1ac5129d93726fb5200e4bfb13d7a50568cddea1c62dedcd530" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="1fea12fb56570ee29bf638d73e9face5a75bee323e06a4ef995a9ed459a6836f" name="ImageMagick" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="3627b572b3ac13dca66cf3bbf114f3c6a58fb71944a03476ec1681db7bc8a176" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="bca611a50f767e4366bba16d376ef38f0798e3b5e31b780fbabc8d566cc876f2" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="bf3d2d7a685df0d5fad6853798bcd9c9e0372708c13b712ef22da3b9805934ee" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="92cf54a26a6d4950fc05e87b19da6da0f1f01c8862d748810293778b92751678" name="ImageMagick" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="1daae56fcf85bc85bf5681a133d3ac019e83f37ebe6976738090cae4653a2f63" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="336199f42c712fb6553715fba8c035ac870ffe2505f3c13f3cfcf64db8490004" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="7e8eac616a92e3c1dc76f70d79367618e6cc0530dcf9e0e2001c2eea19c1be40" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="d21611518946065e818d2894887bcee0810e5027c842ceb4bcffba18a02e238f" name="ImageMagick" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="c7ea75f0ace000e7487fd16dff43e80461e32f8327a657f754a1212860589470" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="38fe5f4092678261627f09e2b75639cd21c5f815b5c5a24fb66017832ea02f53" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="99df95e76c4d3f82688b4034f3abf499cdca04929bae9e680a849b9bbc83eb84" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="4e2dfbef04166b364933ffec9d3a208d6fdc59f2edf820149fbbda14a46bc679" name="ImageMagick-c++" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="28231d882e7b1c2288edf9aed83949d284804b0ff7bdd881b5ad144f321152b6" name="ImageMagick-c++" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="fe69bfe81c73e6dffc7a2a1a73adc6ba2c28fb591bdf03ab7e7fc2ee073f52d5" name="ImageMagick-c++" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="6f248cf4c29cbdd696c7cb6aedcb154d4e1d9272c908ec6aacfb93fc38d137c9" name="ImageMagick-c++" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="740b4ff21d8ff3a6bf024ee714539cc4e3f9bb2ed8e2ca573d1472aa5e4e992f" name="ImageMagick-c++" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="cc47efdd8a79090ee275f9469181565a330dc95bb9725db3721fcdaa83a9fe75" name="ImageMagick-c++" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="d5793a7143fa79888d963d94ff650f2d9343677fcf825282e78a940d1443f2ec" name="ImageMagick-c++" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="940d04457f02aad1d9033bef79115794fb8d20ceaa49ca0a28e6a8ca013455fa" name="ImageMagick-c++" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="10716e2d70d3c78ec76cd832bf3cafbaa9554368e3e94ce3853ff7e91d92d201" name="ImageMagick-c++-devel" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="8b407de92a8502d2e8c78404e61a50681b28f12957302592ce29286c4fa17743" name="ImageMagick-c++-devel" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="1eb5e635b70cd2501473b714ee9d812c9fc839ca9221052e0eaf192f926ca724" name="ImageMagick-c++-devel" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="c0ffb8eb26bffebd931f0ba9e207f815423c7093b14a1ee62cf8521fb698803f" name="ImageMagick-c++-devel" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="e984301bd9cccd8a22a4fcff53204d1920329b7a16e1ffa65b74126f72e59d2d" name="ImageMagick-c++-devel" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="9db9c142c0f3a3c6f257734ee414f1867ebd4f90f9e2e6997b4de0e2995411ef" name="ImageMagick-c++-devel" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="b78bb29ab9d28ba67c7b65458c981ff477fc52a24d3e61329dba01ab450e1898" name="ImageMagick-c++-devel" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="d801732cdc6a21adfa9158e6f7c80dea62022e65b0eb3015c5e64bce130c2838" name="ImageMagick-c++-devel" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="6604269b91dd83ca7f3f5f06f15d71383f7447263fda5ca43f14a02181cb4828" name="ImageMagick-debuginfo" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="44b02d2e3478774087fdaa7a9fc8d6c91fa4437c89a65daafa423459abc28336" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="cf6becf381cbe01fd21e87a93fcb2a2882fc151b0096d4a2a26d6af70ff6f902" name="ImageMagick-debuginfo" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="c9dfcc44a651d051f4dd19f4d9d28ae2cfe7438b22cfdddc7dc769f3d590a8b7" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="be606141945f01b3339268682881231a0a60518f9a28534255c0e0be56866bd8" name="ImageMagick-debuginfo" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="3ee3162a0225b05b34c93b5d4f22726a8263fc3d3117e72e4819f78e8583235f" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="a7c8d7444da9373eff66c333499cf2b856aba6292bf6fcf4303833298300ce52" name="ImageMagick-debuginfo" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="5676de7976626cdf1df52108dfe1af6935da8758d7acdfb4301790c9ab45e821" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="331ef2361b9c58de4863bdc59429543a83b32c68229a9cf9f0f693e2a214f13c" name="ImageMagick-devel" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="f17066c3e96f4d2d38e5bdfc3081385189e68461130efb803da8d369f6f3c22b" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="e2fa9168c79bc7c70979cbf4122702363540e8faead893359fbfffc0e2aac8a6" name="ImageMagick-devel" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="763cad16e00bb6aff27fa964be9abf671a802e19f531890f91c7f90f35bf2200" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="a678daf404547f2313e5abfab3f1b376d2ef6b092074847fcc200b24621ebe5a" name="ImageMagick-devel" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="201526b7e671f4df2488103a6f98cbbae5d4a44e4f83593d4025e0cbf185afa8" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="6a7f77ee34c112710bf6060cd81745d4f88a3d0d07e9df97b3241a9accc14b59" name="ImageMagick-devel" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="9dd6f0664ad3746489eda1e1664173f006782d9b7f4cda7d367668290921249b" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="5b7da60e311201195b206dc502f26c117b295b4a2d1749daa7912b39d68689c8" name="ImageMagick-doc" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="d2ed35292cc1e663ee749a79848134be8dbb284974662c8f294711f1a553fe8d" name="ImageMagick-doc" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="90fd8f64fb5a4f9c0e50a718587089fc992c077a98540b3df9c30e3857432177" name="ImageMagick-doc" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="ccbfff9af4e7fa85f7c3befec6100826c002ee30324bb860146e1c4ffa796c29" name="ImageMagick-doc" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="d4b934c1fbebf2faef31950418a5d960cd7bbec6d754408dda504352b0030131" name="ImageMagick-doc" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="643d64c2102e7f9fe7300d84a1f281d35f8d7d4bd09834d0a2fd5e4308519ae5" name="ImageMagick-doc" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="e287c4c83deb2cf2ecde8bf493d89597b7a7c150c22e0c5e4ceac9b708f1714c" name="ImageMagick-doc" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="a74068369f286a8f129cf25d5f6f7d95fdb5528676f30dd3e7ae233d1fa1a9bb" name="ImageMagick-doc" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="194e3d45ff46692a37659ad9f1b918c1c9aa28837312989e0246a4cbc18b5af7" name="ImageMagick-perl" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="8a82f85ca655724d6b76b7951fc2f65226f1aac79f27f42c2a2eb19d8602d52e" name="ImageMagick-perl" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="51b9ced2c2a85536151c99cc3ca4187a40c54f52121d3516c4c0b2a6f30f389f" name="ImageMagick-perl" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="d5f031b640e13a150a17c4cf89d1d2a743b98380e5165a5908490c8899990860" name="ImageMagick-perl" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="8bda5557d40c915d02304cd313933d78f31b6d242a907790f258a56e0e0c2f95" name="ImageMagick-perl" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="9fc42419c36ab7da40294dc96a0ba9617d13e5ac6f2bb566f7b182cdff94c772" name="ImageMagick-perl" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="a46e52a0b7ab9c0fb7569f34d71bed962906f739e9701622379eeaa04c29d2ea" name="ImageMagick-perl" arch="i686">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="b33408339daada61180c41b6386d99f5f476ba70a12dddb9e11ac435fb5d6b59" name="ImageMagick-perl" arch="x86_64">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="83a08574152d0556a9270e2343736532d546b2130044a4e0b56ad646404f5617" name="LibRaw" arch="i686">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="80d5d8a8b8be88f215364bbb7693f6e1c3bbc6aaa7f4b1a3f84229e483ce16e1" name="LibRaw" arch="src">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="e0123dd491be295994b161ca1b400743d0616b57b3212b5dbaa27497cda46ea0" name="LibRaw" arch="src">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="264a182eee217dd423d439e8218265240410b12593370e5246b1c6b0331f6163" name="LibRaw" arch="x86_64">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="66403d2e2734360c0b0575d16926b8a3b51b7ec453c4d5746ca9496df73a4fce" name="LibRaw-debuginfo" arch="i686">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="de68f6bee9761799e777485c62bfd129c7b3faa718ef4ab50da672828ba0a4ac" name="LibRaw-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="e95a0b3d31c2ed334952e5032b6d81683473f6e059bfc2c31f5bf57b30159315" name="LibRaw-devel" arch="i686">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="df533aa2b4a0931669cf11ce825d9cb25cdacc2e5dc41730cde8de5adf0758c2" name="LibRaw-devel" arch="x86_64">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="62c13c9dd61eb2f2f3c4f775ddb2df8c08a476e178ffec4057ff26494520e754" name="LibRaw-static" arch="i686">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="5cfebb6fd1337e8fe81eadf849bc86a846f795a20a69047e4faad0fe06301be8" name="LibRaw-static" arch="x86_64">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="29ca57e255c9de740ba8c52d5cb3333baacebc719b75899b07bf7e8ee940af70" name="NetworkManager" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="6adbb95cabac54f136ce6ea6864eaae1972efb2421486e961cb890ed0e4d1d3e" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="5251269e80c04e4f8b382e152624816f93d6f0bb57e73f761af0d90c685c8e1a" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="129ddc7d1f437c967461990c36e3d9097e408566a8ff147a13eb4b27bf566b1d" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="b8628717da6c91c6fff43d240c8ea43968ccb4885311e77dc023628b333d9f57" name="NetworkManager-adsl" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="e47bf45dd7c79121cfac48d7747218b7ab1cecec7ed61c6eb6de0a9c2866c426" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="b609a275bf42a25f891f506a688495bbce48b1260bfa9463fb0904f491ad3aea" name="NetworkManager-bluetooth" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="58b6ca5cb08f46093f4d11cd876d61b5b882baaa0895f8a0d21f577f8edf4d1f" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="3b5e305bea3c82c7b4b414debf96c35d58de0727b7746d7e979921a781dfd3dd" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="eb09471947d9b98e555e2be24a540f55a9a68f161f5cac764ed3015a6f72852d" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="633137ef157f7a8e8995ef0b3ff59713a51dcbafc25aaff11b81b712ccbd4665" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="4d78a935425dcc2f534d0c1558b7f1bb09cf0139630b1b4ee1b51e02f1170450" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="1b5c5c0abb4c658742f69667806a8417e22400804b8f16978269373d22d4873e" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="ed4135914833f76373785bdfcc33c997e94b528fe626e990a2bae830cf7c06ff" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="f8a4af403bb296621031bf91b6b319cf468d951d08d29f74576616eda876baed" name="NetworkManager-glib" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="c009b7ffbfef8d8abacca20ecaddc6b37ccf736a11450be7924ed631b8e78f08" name="NetworkManager-glib" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="69c31b6380d12d1d6bacce2ac9881347b839ec60df8700ec08d9ea18403529bd" name="NetworkManager-glib-devel" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="a6d665a86d9df5435735121b3b8e2bd727ca4381d8e1ebb039b4ca7ae47b9c5c" name="NetworkManager-glib-devel" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="4a9e9d84405ccc6f9a83f1307f696f9d68498ee9d26f7fe9b2dad8c27553e258" name="NetworkManager-libnm" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="362e751320c7df9f3baa4f20ea3e6803e53b0c88fbe61e9068d5abc4e5587084" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="555266390eed86105767d7fbcd5a58cc7d36214faf967ab621aad70add6ebab3" name="NetworkManager-libnm-devel" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="60943bfd0fc6fae50f5e870e9c1bb2e7e7f5d2b9fc2f17d8bea71e30b1bcbeaa" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="499d542a082b2ff81c0ff8786715ee8825e68b60bb04d4d1d1145f823083cc95" name="NetworkManager-ovs" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="914ef7c43ce083f452e088a78c24fe6c67e4f688a5ffb9dc719cf4bc1d1c1c16" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="de53f5cd1052a5a0f24009ad3942b1c492f49a11f9e52f11545acf4b677da3d6" name="NetworkManager-ppp" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="52e7dcfc9bc9fc331031c3e11c79dda447476a41d83c7557e660bb6c129a6bbb" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="d64837ae2bf2c8b99b0fa87b15fc98cd80c4359feb75a5c2595334f1dd8ef797" name="NetworkManager-team" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="203297573bfbab0b89f6a4023d94eefef570b902ffda10da6c8e31977c1735f0" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="3131f90bcf962aebcceb35ec14d22a010c3e87f0163e25f8305f19ca56a1e831" name="NetworkManager-tui" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="dbb5d24236673b2cb871322d310170301b3e2176d26a3f73fdb1708c5193ddd5" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="c58fce848c5cab8683e804ac40fe688be26c82a70796aa7172d060f746d12148" name="NetworkManager-wifi" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="880e922a5425b6457e57302768ec95830944f383bd2140b57203c1a59919961d" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="26247e057dc91583547a1b885e97df612e02f01258f3bd4880a1e38a5b96c4ee" name="NetworkManager-wwan" arch="i686">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="6380589d16870da2292331020cdfe9c7665a5e56b4270c4660036bc3fb8a83d6" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="c7d586e753aaf1f1637dc753fdf22571ad55bc4496cbaaff1be9b1ab91b34c75" name="adcli" arch="i686">
  <version epoch="0" ver="0.8.1" rel="16.el7_9.1"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-8" date="1553256000">- Various updates for RHEL-7.7
- many adcli-krb5-????? directories are created /tmp [#1588596]
- adcli exports kerberos ticket with old kvno [#1642546]
- [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
- Improve handling of service principals [#1644311]
- [RFE] adcli command with --unix-* options doesn't update
  values in UnixAttributes Tab for user [#1337489]
- [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
- [RFE] Need an option for adcli command which will show domain join status. [#1622583]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-9" date="1556798400">- Fixes for RHEL-7.7 updates
- additional patch for [RFE] adcli join should preserve SPN added by adcli
  preset-computer [#1630187]
- new patches for many adcli-krb5-????? directories are created /tmp [#1588596]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-10" date="1565611200">- adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
  Cannot allocate memory" [1665162]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-11" date="1566907200">- Fixes and improvements for RHEL-7.8
- Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
- adcli update --add-samba-data does not work as expected [#1738573]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-12" date="1567598400">- adcli info should send netlogin pings to all domain controllers, not only a subset [#1685138]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-13" date="1579003200">- adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1786776]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-14" date="1587297600">- Fixes for RHEL-7.9
- Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
- [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-15" date="1591617600">- More fixes for RHEL-7.9
- No longer able to delete computer from AD using adcli [#1840752]
- adcli: presetting $computer in $domain domain failed: Cannot set computer
  password: Authentication error [#1762633]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16" date="1606132800">- adcli: couldn't connect to KEYRING:persistent:0:krb_ccache_jgrrBI8 [#1871436]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16.1" date="1606132801">- add missing patch for [#1871436]</changelog>
</package>
<package pkgid="27347a3f2222e33343e360a475bef65d674a3689f561ce9a52b8fbb90cdc361d" name="adcli" arch="src">
  <version epoch="0" ver="0.8.1" rel="16.el7_9.1"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-8" date="1553256000">- Various updates for RHEL-7.7
- many adcli-krb5-????? directories are created /tmp [#1588596]
- adcli exports kerberos ticket with old kvno [#1642546]
- [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
- Improve handling of service principals [#1644311]
- [RFE] adcli command with --unix-* options doesn't update
  values in UnixAttributes Tab for user [#1337489]
- [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
- [RFE] Need an option for adcli command which will show domain join status. [#1622583]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-9" date="1556798400">- Fixes for RHEL-7.7 updates
- additional patch for [RFE] adcli join should preserve SPN added by adcli
  preset-computer [#1630187]
- new patches for many adcli-krb5-????? directories are created /tmp [#1588596]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-10" date="1565611200">- adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
  Cannot allocate memory" [1665162]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-11" date="1566907200">- Fixes and improvements for RHEL-7.8
- Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
- adcli update --add-samba-data does not work as expected [#1738573]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-12" date="1567598400">- adcli info should send netlogin pings to all domain controllers, not only a subset [#1685138]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-13" date="1579003200">- adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1786776]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-14" date="1587297600">- Fixes for RHEL-7.9
- Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
- [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-15" date="1591617600">- More fixes for RHEL-7.9
- No longer able to delete computer from AD using adcli [#1840752]
- adcli: presetting $computer in $domain domain failed: Cannot set computer
  password: Authentication error [#1762633]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16" date="1606132800">- adcli: couldn't connect to KEYRING:persistent:0:krb_ccache_jgrrBI8 [#1871436]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16.1" date="1606132801">- add missing patch for [#1871436]</changelog>
</package>
<package pkgid="3062e4e4e83daa027daecef2156f5d4a1ee939f818d4c3fc5e9edecbcbfad4a8" name="adcli" arch="src">
  <version epoch="0" ver="0.8.1" rel="16.el7_9.1"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-8" date="1553256000">- Various updates for RHEL-7.7
- many adcli-krb5-????? directories are created /tmp [#1588596]
- adcli exports kerberos ticket with old kvno [#1642546]
- [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
- Improve handling of service principals [#1644311]
- [RFE] adcli command with --unix-* options doesn't update
  values in UnixAttributes Tab for user [#1337489]
- [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
- [RFE] Need an option for adcli command which will show domain join status. [#1622583]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-9" date="1556798400">- Fixes for RHEL-7.7 updates
- additional patch for [RFE] adcli join should preserve SPN added by adcli
  preset-computer [#1630187]
- new patches for many adcli-krb5-????? directories are created /tmp [#1588596]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-10" date="1565611200">- adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
  Cannot allocate memory" [1665162]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-11" date="1566907200">- Fixes and improvements for RHEL-7.8
- Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
- adcli update --add-samba-data does not work as expected [#1738573]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-12" date="1567598400">- adcli info should send netlogin pings to all domain controllers, not only a subset [#1685138]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-13" date="1579003200">- adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1786776]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-14" date="1587297600">- Fixes for RHEL-7.9
- Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
- [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-15" date="1591617600">- More fixes for RHEL-7.9
- No longer able to delete computer from AD using adcli [#1840752]
- adcli: presetting $computer in $domain domain failed: Cannot set computer
  password: Authentication error [#1762633]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16" date="1606132800">- adcli: couldn't connect to KEYRING:persistent:0:krb_ccache_jgrrBI8 [#1871436]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16.1" date="1606132801">- add missing patch for [#1871436]</changelog>
</package>
<package pkgid="18f08898299733d955f354c2045b67dc9910a9c169e846299f700c10b9e10b5c" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.1" rel="16.el7_9.1"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-8" date="1553256000">- Various updates for RHEL-7.7
- many adcli-krb5-????? directories are created /tmp [#1588596]
- adcli exports kerberos ticket with old kvno [#1642546]
- [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
- Improve handling of service principals [#1644311]
- [RFE] adcli command with --unix-* options doesn't update
  values in UnixAttributes Tab for user [#1337489]
- [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
- [RFE] Need an option for adcli command which will show domain join status. [#1622583]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-9" date="1556798400">- Fixes for RHEL-7.7 updates
- additional patch for [RFE] adcli join should preserve SPN added by adcli
  preset-computer [#1630187]
- new patches for many adcli-krb5-????? directories are created /tmp [#1588596]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-10" date="1565611200">- adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
  Cannot allocate memory" [1665162]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-11" date="1566907200">- Fixes and improvements for RHEL-7.8
- Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
- adcli update --add-samba-data does not work as expected [#1738573]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-12" date="1567598400">- adcli info should send netlogin pings to all domain controllers, not only a subset [#1685138]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-13" date="1579003200">- adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1786776]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-14" date="1587297600">- Fixes for RHEL-7.9
- Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
- [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-15" date="1591617600">- More fixes for RHEL-7.9
- No longer able to delete computer from AD using adcli [#1840752]
- adcli: presetting $computer in $domain domain failed: Cannot set computer
  password: Authentication error [#1762633]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16" date="1606132800">- adcli: couldn't connect to KEYRING:persistent:0:krb_ccache_jgrrBI8 [#1871436]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16.1" date="1606132801">- add missing patch for [#1871436]</changelog>
</package>
<package pkgid="807136c8717e031ac46cfde7a02c3d3f52b95dc02e9998b0168ce67afd5caf8d" name="adcli-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.1" rel="16.el7_9.1"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-8" date="1553256000">- Various updates for RHEL-7.7
- many adcli-krb5-????? directories are created /tmp [#1588596]
- adcli exports kerberos ticket with old kvno [#1642546]
- [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
- Improve handling of service principals [#1644311]
- [RFE] adcli command with --unix-* options doesn't update
  values in UnixAttributes Tab for user [#1337489]
- [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
- [RFE] Need an option for adcli command which will show domain join status. [#1622583]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-9" date="1556798400">- Fixes for RHEL-7.7 updates
- additional patch for [RFE] adcli join should preserve SPN added by adcli
  preset-computer [#1630187]
- new patches for many adcli-krb5-????? directories are created /tmp [#1588596]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-10" date="1565611200">- adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
  Cannot allocate memory" [1665162]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-11" date="1566907200">- Fixes and improvements for RHEL-7.8
- Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
- adcli update --add-samba-data does not work as expected [#1738573]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-12" date="1567598400">- adcli info should send netlogin pings to all domain controllers, not only a subset [#1685138]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-13" date="1579003200">- adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1786776]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-14" date="1587297600">- Fixes for RHEL-7.9
- Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
- [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-15" date="1591617600">- More fixes for RHEL-7.9
- No longer able to delete computer from AD using adcli [#1840752]
- adcli: presetting $computer in $domain domain failed: Cannot set computer
  password: Authentication error [#1762633]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16" date="1606132800">- adcli: couldn't connect to KEYRING:persistent:0:krb_ccache_jgrrBI8 [#1871436]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16.1" date="1606132801">- add missing patch for [#1871436]</changelog>
</package>
<package pkgid="09d80dfcf001d4df4b772d1e21ac956e92fa57af4956346326de0d04463f7da8" name="adcli-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.1" rel="16.el7_9.1"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-8" date="1553256000">- Various updates for RHEL-7.7
- many adcli-krb5-????? directories are created /tmp [#1588596]
- adcli exports kerberos ticket with old kvno [#1642546]
- [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
- Improve handling of service principals [#1644311]
- [RFE] adcli command with --unix-* options doesn't update
  values in UnixAttributes Tab for user [#1337489]
- [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
- [RFE] Need an option for adcli command which will show domain join status. [#1622583]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-9" date="1556798400">- Fixes for RHEL-7.7 updates
- additional patch for [RFE] adcli join should preserve SPN added by adcli
  preset-computer [#1630187]
- new patches for many adcli-krb5-????? directories are created /tmp [#1588596]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-10" date="1565611200">- adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
  Cannot allocate memory" [1665162]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-11" date="1566907200">- Fixes and improvements for RHEL-7.8
- Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
- adcli update --add-samba-data does not work as expected [#1738573]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-12" date="1567598400">- adcli info should send netlogin pings to all domain controllers, not only a subset [#1685138]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-13" date="1579003200">- adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1786776]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-14" date="1587297600">- Fixes for RHEL-7.9
- Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
- [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-15" date="1591617600">- More fixes for RHEL-7.9
- No longer able to delete computer from AD using adcli [#1840752]
- adcli: presetting $computer in $domain domain failed: Cannot set computer
  password: Authentication error [#1762633]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16" date="1606132800">- adcli: couldn't connect to KEYRING:persistent:0:krb_ccache_jgrrBI8 [#1871436]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16.1" date="1606132801">- add missing patch for [#1871436]</changelog>
</package>
<package pkgid="5d0f3293529eb86375cc8b1a9bbd036581698c9f3da74c5af5220db932011d22" name="aide" arch="i686">
  <version epoch="0" ver="0.15.1" rel="13.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.15.1-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-6" date="1383912000">- warn if processing prelinked binary objects and the prelink binary
  is not available
  Resolves: rbhz#1004826</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-9" date="1407153600">- Don't require prelink on aarch64 and ppc64le
  Resolves: rhbz#1078555
  Resolves: rhbz#1125462</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-10" date="1466769600">- Updated the default configuration file. New defaults contributed
  by Steve Grubb.
  Resolves: rhbz#1304334</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-11" date="1468929600">- Corrected typos in the default configuration file
  Resolves: rhbz#1304334</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-12" date="1488888000">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1377215</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-13" date="1490011200">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1400548</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1.1" date="1643112000">- backported fix for CVE-2021-45417
  resolves: rhbz#2041952</changelog>
</package>
<package pkgid="d431328b5bfcccc226691c4968538f112984d9719a5b849a323c7c5d8f8b9cd7" name="aide" arch="src">
  <version epoch="0" ver="0.15.1" rel="13.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.15.1-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-6" date="1383912000">- warn if processing prelinked binary objects and the prelink binary
  is not available
  Resolves: rbhz#1004826</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-9" date="1407153600">- Don't require prelink on aarch64 and ppc64le
  Resolves: rhbz#1078555
  Resolves: rhbz#1125462</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-10" date="1466769600">- Updated the default configuration file. New defaults contributed
  by Steve Grubb.
  Resolves: rhbz#1304334</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-11" date="1468929600">- Corrected typos in the default configuration file
  Resolves: rhbz#1304334</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-12" date="1488888000">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1377215</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-13" date="1490011200">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1400548</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1.1" date="1643112000">- backported fix for CVE-2021-45417
  resolves: rhbz#2041952</changelog>
</package>
<package pkgid="bc7942637fa94b9a12c5786c06dd17d959506455d70f3d87fed769fe80b65d3e" name="aide" arch="src">
  <version epoch="0" ver="0.15.1" rel="13.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.15.1-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-6" date="1383912000">- warn if processing prelinked binary objects and the prelink binary
  is not available
  Resolves: rbhz#1004826</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-9" date="1407153600">- Don't require prelink on aarch64 and ppc64le
  Resolves: rhbz#1078555
  Resolves: rhbz#1125462</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-10" date="1466769600">- Updated the default configuration file. New defaults contributed
  by Steve Grubb.
  Resolves: rhbz#1304334</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-11" date="1468929600">- Corrected typos in the default configuration file
  Resolves: rhbz#1304334</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-12" date="1488888000">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1377215</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-13" date="1490011200">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1400548</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1.1" date="1643112000">- backported fix for CVE-2021-45417
  resolves: rhbz#2041952</changelog>
</package>
<package pkgid="7b1cde423f7400a8ecb1ac2b34bb2b6fce575d8a8d6f7df8769d5ee1c96999bf" name="aide" arch="x86_64">
  <version epoch="0" ver="0.15.1" rel="13.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.15.1-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-6" date="1383912000">- warn if processing prelinked binary objects and the prelink binary
  is not available
  Resolves: rbhz#1004826</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-9" date="1407153600">- Don't require prelink on aarch64 and ppc64le
  Resolves: rhbz#1078555
  Resolves: rhbz#1125462</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-10" date="1466769600">- Updated the default configuration file. New defaults contributed
  by Steve Grubb.
  Resolves: rhbz#1304334</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-11" date="1468929600">- Corrected typos in the default configuration file
  Resolves: rhbz#1304334</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-12" date="1488888000">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1377215</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-13" date="1490011200">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1400548</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1.1" date="1643112000">- backported fix for CVE-2021-45417
  resolves: rhbz#2041952</changelog>
</package>
<package pkgid="255829a224a8e75cb8793a3133c86d5011bb98b1a63b5d8eda7b3321e7c38954" name="aide-debuginfo" arch="i686">
  <version epoch="0" ver="0.15.1" rel="13.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.15.1-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-6" date="1383912000">- warn if processing prelinked binary objects and the prelink binary
  is not available
  Resolves: rbhz#1004826</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-9" date="1407153600">- Don't require prelink on aarch64 and ppc64le
  Resolves: rhbz#1078555
  Resolves: rhbz#1125462</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-10" date="1466769600">- Updated the default configuration file. New defaults contributed
  by Steve Grubb.
  Resolves: rhbz#1304334</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-11" date="1468929600">- Corrected typos in the default configuration file
  Resolves: rhbz#1304334</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-12" date="1488888000">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1377215</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-13" date="1490011200">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1400548</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1.1" date="1643112000">- backported fix for CVE-2021-45417
  resolves: rhbz#2041952</changelog>
</package>
<package pkgid="dbc375b9ce254d02662a17983e6c7e1ddfded59b57f0f344e3f86745190143f2" name="aide-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.15.1" rel="13.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.15.1-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-6" date="1383912000">- warn if processing prelinked binary objects and the prelink binary
  is not available
  Resolves: rbhz#1004826</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-9" date="1407153600">- Don't require prelink on aarch64 and ppc64le
  Resolves: rhbz#1078555
  Resolves: rhbz#1125462</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-10" date="1466769600">- Updated the default configuration file. New defaults contributed
  by Steve Grubb.
  Resolves: rhbz#1304334</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-11" date="1468929600">- Corrected typos in the default configuration file
  Resolves: rhbz#1304334</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-12" date="1488888000">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1377215</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-13" date="1490011200">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1400548</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1.1" date="1643112000">- backported fix for CVE-2021-45417
  resolves: rhbz#2041952</changelog>
</package>
<package pkgid="803085c7c9f4c9216caee05bcfabe2f2c613595eab74f1f22360d91a73b8df9b" name="apr-util" arch="i686">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="d818259a630afd248207813742fbeca9a01b397f207e7f448a01d74e01ed03a2" name="apr-util" arch="src">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="8912abb3078bd28a8632de1bd0bbe921977cad8d159d54c1421f7dbb3cd84f68" name="apr-util" arch="src">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="49c2257b7e365c72c8a427cea896a0064851c49f2f87677e74068de4a1f40952" name="apr-util" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="ab5b5aa3afa168121817487370f13d641d366ba666289e472a28686101ab0a16" name="apr-util-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="aeb96ad7075dbe38feb420ceb3337b366962370cb9df8562467195016205b074" name="apr-util-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="e094f462c853d11d468ea2add7768708342c9acdb54ae87c752cccbef96f0172" name="apr-util-devel" arch="i686">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="3f7f8d623cc815fcd029bb6fa0f730a8e108b3d74af0c6edd5cbb151ea6f9f55" name="apr-util-devel" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="99d250ee7cd756dbf7411378888fa2e915d62dd47cc18b91e0fd4a82217a4947" name="apr-util-ldap" arch="i686">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="65dcb1d5bf5bebe9aacddcab4d517c8c60cc5ff38bc08957bd111e35557f1cc3" name="apr-util-ldap" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="feea1e3ae51aadd6873f3e4ad0bf83a19eb9befdf942cb3d4f58cc9269eef2ca" name="apr-util-mysql" arch="i686">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="c79a47b39713b37beefef443819b8fdf1a58686bd53f9dce532253fe2367be5b" name="apr-util-mysql" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="8fc63d52d80f790a452862091876ade0b3c51678cc0aa76208ed42a7f8ee7516" name="apr-util-nss" arch="i686">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="5ef15f939818c24b0d2dd86063eb3168647864e6df0f5cb562d4ae4852f6fc5c" name="apr-util-nss" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="9162e02865f8f4c21a7388e1e6b949b661e8f1478f90092e7c941f1231b0962d" name="apr-util-odbc" arch="i686">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="1532b9c2d082151be1a8121ea1cae1003edd4b7c68088e46bbe8099ff5622faa" name="apr-util-odbc" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="361ab0aa35562b87d181de8edaac80d3540857a72a92106b15b97292063e6e8f" name="apr-util-openssl" arch="i686">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="d0a43d105d85e879897ae2856bad07a424c556ef8f62b4360563d0896e8408df" name="apr-util-openssl" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="60f1c71e1b406043e0243bc000a66902d65402625181fa544ce1beeccb40f275" name="apr-util-pgsql" arch="i686">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="18c4eb2307cd8cf8ebc9f2561799dfe5274eb3e8065bb12a69e2ffb14abc793f" name="apr-util-pgsql" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="053adf5b039063cf51c1513e286bc97f96f0441e19eb710eab749cf9050b736e" name="apr-util-sqlite" arch="i686">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="8d64cde10d86a7452af8b2472d3572a044eeb334354c7a3929a168c8c54a7a07" name="apr-util-sqlite" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="4ad6f260707d9c39a6932cae9c56fb9d3582bb853a6d49c6a1ed068d7d4e3b3b" name="at" arch="i686">
  <version epoch="0" ver="3.1.13" rel="25.el7_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-23" date="1505390400">- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-24" date="1527076800">- log the jobs being run</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 3.1.13-25" date="1644926400">- re-import selinux support from upstream</changelog>
</package>
<package pkgid="caec0bdf4a376e29bbf48b3f1ba00fc49aeb579fff648692da32572735e8e145" name="at" arch="src">
  <version epoch="0" ver="3.1.13" rel="25.el7_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-23" date="1505390400">- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-24" date="1527076800">- log the jobs being run</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 3.1.13-25" date="1644926400">- re-import selinux support from upstream</changelog>
</package>
<package pkgid="72926bc6d797d7a2618c75cac5f2be400121cdf620534fea72ffaeb6f55a8805" name="at" arch="src">
  <version epoch="0" ver="3.1.13" rel="25.el7_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-23" date="1505390400">- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-24" date="1527076800">- log the jobs being run</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 3.1.13-25" date="1644926400">- re-import selinux support from upstream</changelog>
</package>
<package pkgid="c03e4a444a64db3126ef42d62319515285e7e2ed55421d6c616d20dda539909d" name="at" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="25.el7_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-23" date="1505390400">- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-24" date="1527076800">- log the jobs being run</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 3.1.13-25" date="1644926400">- re-import selinux support from upstream</changelog>
</package>
<package pkgid="85c89ca0c2c21c3f3988aea3de8475c6b8ae6f5611849ae423e556453be74e51" name="at-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.13" rel="25.el7_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-23" date="1505390400">- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-24" date="1527076800">- log the jobs being run</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 3.1.13-25" date="1644926400">- re-import selinux support from upstream</changelog>
</package>
<package pkgid="0c6fb3d147060ea83b492f9f4aaec91542c2ce93d1eb768969db6129b24e4ec6" name="at-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="25.el7_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-23" date="1505390400">- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-24" date="1527076800">- log the jobs being run</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 3.1.13-25" date="1644926400">- re-import selinux support from upstream</changelog>
</package>
<package pkgid="02f15b5e9a43233b9425b243648dff61cf4fc8e114f8d7b6f635fd78256a57eb" name="at-sysvinit" arch="i686">
  <version epoch="0" ver="3.1.13" rel="25.el7_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-23" date="1505390400">- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-24" date="1527076800">- log the jobs being run</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 3.1.13-25" date="1644926400">- re-import selinux support from upstream</changelog>
</package>
<package pkgid="0ed9779e27e21b416d3a65d1287e6229396de8d4c3cf263aafee265e1d49af98" name="at-sysvinit" arch="x86_64">
  <version epoch="0" ver="3.1.13" rel="25.el7_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-23" date="1505390400">- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-24" date="1527076800">- log the jobs being run</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 3.1.13-25" date="1644926400">- re-import selinux support from upstream</changelog>
</package>
<package pkgid="861acfcc20caee542d6eb8414ebc1271030bf7733921bf4dd021d118a8296497" name="autocorr-af" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="133a2f1e483de0cd744d0bef09eca3f7f1899addb889ea5e3840087e77f551bf" name="autocorr-af" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c4028f9ea0ef2a23b15ea92cdd2f7798ea0fc8c4b6cf8f3ce65e8d39a520b70f" name="autocorr-bg" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="99d2469d7d3815f6b8afc693dfe06a55768cf93f91cc65ec95edf217257083f9" name="autocorr-bg" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2262d192067f91421d59661ece5597ad8fae40d7ff509b9c20d9b0c5fb19a47b" name="autocorr-ca" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="fa4d24607c66b4b76fa15d3e4d7b6896e3c85127189663306cadcb0849d61d19" name="autocorr-ca" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="9287ebbe8f4ced11ab81a6d4a246aa0d9046c201fb2e92ef0fbcb371bcf83ded" name="autocorr-cs" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="05ad19e35707cdbd0e94e96354485d375afa00771e811b6da1fb3a200101704e" name="autocorr-cs" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="af563b4997ac25f9313b56320ae188a8b5822cfbdb38dfbfa845f811592a1c06" name="autocorr-da" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="60d3b60cdf6da80076d462739526ba96c2c72e1f8e4850f9280a4e3ae7f12689" name="autocorr-da" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ed317fb08cd7778fc1be071089c1c01d18aa5b02e9c393ab0c8638bad0723a56" name="autocorr-de" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="350040dba2ee4e59ad81531b089ef7b7287405ab44d45333f60716cf8c48adb1" name="autocorr-de" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="74b62af638edcacd16056c2b43ed3b1031c1c05c403508ff93b444a4e1ceff2f" name="autocorr-en" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c34c965c24a131bb1eb1807f6dc829b113510622f2ece1cdfc3375f25a53818e" name="autocorr-en" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8132094b9d884bd5a7ce78a72da85e1e04da81730b731467c930614c0687b79e" name="autocorr-es" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="75e236163877b5ae3a6d0474313cf37999319558539ea2579e0e69f2e5473e30" name="autocorr-es" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4fdaeaf13d35efc8c6764fe54048c85cf51b426e810b8fe8dfc307cbfa6f3a52" name="autocorr-fa" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8834d50d2ed3a6c0f50a4e35e754392508cbb68eeee6590f718415a5667c8a42" name="autocorr-fa" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="0fc542977ea6874940d0968430c3450bbd4d6da5a40a6ffc2adc7bf65c340137" name="autocorr-fi" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f53147e6202526b02fcb67f7a4b6d28fac992c492e0a102f8f1bdbb963ed4567" name="autocorr-fi" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f1d9fcd14e8b6841d425ec9234803f6eb8335ba98767d277c529e72ebeccf0b1" name="autocorr-fr" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8f2ce40bef39bffcc1575b00c7ef10908b951fc711df479eac99aeefc309f72b" name="autocorr-fr" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="5e115ae61128229b37ec9baede18a7b6d0c4a86507165f68907f28bec3021726" name="autocorr-ga" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4219b0df9360da6185d4189140df9b66fc523ffc295e37c6618c2a52200f86b1" name="autocorr-ga" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7c95004cb309b0d703b73f81ff309beaecf6f3c19401bc34058a0f6229d0234d" name="autocorr-hr" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="accac6d25f2def0148b2b55eef53f4e53a76fd2a009b1749f17e99224c2b9d16" name="autocorr-hr" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4771d46c4f3b5a45b298c426d7a296c78b9f5a47dc430a079a5ffeb004bd8baa" name="autocorr-hu" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7d8f9be4aa81da613a569a0d7ef9132be91f3fe082135ed774346aca7f40a3ee" name="autocorr-hu" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8b99dd2bc140196fb05b11f8f384507654e15fada846f11b5e60c1c96402d6e5" name="autocorr-is" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="970a06ad2ac870ae6d1d68bcfcb76d9dbaf6b3c6c63d492cd4b8931218be486a" name="autocorr-is" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="9d664501e33f2206526efce019197df3496d4116ac121591752fef9a8a59d7af" name="autocorr-it" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f3341cc4a7da615939f78cc8214ef37eb0b0775cfa3cd6d84e9cd68333c6340b" name="autocorr-it" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="fc19bc5a574934be05a1afe56e97d4e87b6d7c917f371a52b0bda64c562350f8" name="autocorr-ja" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="381c80cb85fef50f16df9ab75702b69bd467e1614b9387611114af92be2c1c62" name="autocorr-ja" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="3d359076e53cfa6607d34c40eeebf1b6f1d8343d2c4e05a43b5f4b4eab517fa5" name="autocorr-ko" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="3ab87d757cef729c9ec65d2064a9a4111db3debdf889c3d8558fc99fde8e6c7e" name="autocorr-ko" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="6ddb307eeeec8f518ae0ee658afef2c06dc09ba627c465ce5daab5adef347bb6" name="autocorr-lb" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b582d2fd63efcc1098b24a3f8a8147b7d5255bfd4886d48778df36987f896814" name="autocorr-lb" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c5f54e3f13d76a6ce7c4cf9764f99a25a2727ba161efd60bdb567f8a7d253179" name="autocorr-lt" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="da8602fb19e1af2853e2f37f89911a557e34a51146911040b75276da292c76f3" name="autocorr-lt" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="51e3bf14f6669fc25d8326ae5a045a1cba230fa647298027db88cb1a90237b40" name="autocorr-mn" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="daecf910273857986183df3d5de597e8c90dbc54981a6b5a046880410bf4bb23" name="autocorr-mn" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d38078c8ae4a552a343bfc4cf9b26442e685957b38e7b32709495435791a2d9d" name="autocorr-nl" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="80181a2408fcb85ebc843bb0e63fadccd898fac33bbffd2e42849dc663d47437" name="autocorr-nl" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7f56f40fa2e8bb47895ee0c6459e03da55951c5c3d5367e861012974c28170fb" name="autocorr-pl" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="62f2be3b28841684d086b1dd9d251ecc3c269f6b9134f1ee5340c990283f0c6d" name="autocorr-pl" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="cc07c1179de108658c5ea2b423876c2bff7fb38a7f8beb0df650545ecb2c579e" name="autocorr-pt" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f8a742f164b98e786d36d6ae386d6b41864285907f7fd8815a8f456fe52d42aa" name="autocorr-pt" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="39f49d61ee22dfa9c957010366c800739b998c2240383585d832556b54616092" name="autocorr-ro" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="efd25bba0bfdbc9e679b75ead33296bdbe1bd0c65b83f0d618c3e67502e4ba91" name="autocorr-ro" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b8718b48a41cb9274ffa7fb0bbae2ecf8c4f579f60d51a670c6c340182252f94" name="autocorr-ru" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="100a23e1034f7fb7c6f4e66b53b28f9b9bf8361ce7bdeded347fea3f13abc8db" name="autocorr-ru" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="12c2ca932ed84f569e0b9279ac34f1221f91bd04d9a75d5e67e0e765fca2e143" name="autocorr-sk" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="30eea8428c0f8deaf9971d822520b68806e5896a6856599f5c938eebd0faadef" name="autocorr-sk" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="85aa5f5dbbdd7e4f5f26476b47cb0a02e517340186967049961dbebf9570af2b" name="autocorr-sl" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="592594a298dbd3f7dd36ca8e01cee347bf2e35ff8052f9831be54e5af4ea9f39" name="autocorr-sl" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a03352cf1c01a2e0ab676c8684ca6ac29dd3bc5722b79d468a2f4bb4d383bc2b" name="autocorr-sr" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7542109cf128288384b6967f9cd2984e2280c0417dbd6f1057f7582566d77369" name="autocorr-sr" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="84d5663cb6d38845a2c8078a328ed5d1633bf96846e7c43029814ffa0ca2e713" name="autocorr-sv" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="6b5cb1420b5ee82e95bbd596b0d012d987fcf3a7b4a99022acb6851aec51c632" name="autocorr-sv" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f0ac7baaf0093fd1a74695ec1a9e9e098b104479ecc697c314a37074ce62ebde" name="autocorr-tr" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c96ace67d7bb7541481361c1ee5d02aba349acfae7603325f647fe8aba1311db" name="autocorr-tr" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="71fce046d5a07797b549e271469a3e657891bf04c56849dcdc01e63fe8eeec07" name="autocorr-vi" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7a348e5a2479bb315968e08d5a42db9d108de421208aa618054d36727a326cf1" name="autocorr-vi" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="05459a01593e0e0d4ea851f4c06152c3c667dea95602dd3797ea5bd9dd336957" name="autocorr-zh" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8f9483eb12d82a91404e2259229a4d5b0d6eb3bd58f636975804446b6205234e" name="autocorr-zh" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="e63573a55d12bdd32c7d4336be095d479c0d1938142fe5c4c4e3be14417de13f" name="autofs" arch="i686">
  <version epoch="1" ver="5.0.7" rel="116.el7_9.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116el7_9.1" date="1675857600">- bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
  with mount trigger
  - fix kernel mount status notification.
- Resolves: rhbz#2107752</changelog>
</package>
<package pkgid="a4551847651073647f37e2988882f3f3e82c3332e4b543ad2ca1e8f806e8f180" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="116.el7_9.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116el7_9.1" date="1675857600">- bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
  with mount trigger
  - fix kernel mount status notification.
- Resolves: rhbz#2107752</changelog>
</package>
<package pkgid="8debfc3dd6fe371b47ec4d88c31ad97ebb601e316f54afd32f1e4bc9f6e0cf39" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="116.el7_9.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116el7_9.1" date="1675857600">- bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
  with mount trigger
  - fix kernel mount status notification.
- Resolves: rhbz#2107752</changelog>
</package>
<package pkgid="15836cfb70d46343221f4a32f0ef589807133acb906a45ffbdaae51700839159" name="autofs" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="116.el7_9.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116el7_9.1" date="1675857600">- bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
  with mount trigger
  - fix kernel mount status notification.
- Resolves: rhbz#2107752</changelog>
</package>
<package pkgid="58128b32bab0dfe9f17f76a2ae8b0309e4733cb9ce5b16cae9bf0605e034ce31" name="autofs" arch="i686">
  <version epoch="1" ver="5.0.7" rel="116.el7_9"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-107" date="1564488000">- bz1734057 - automount segfaults if a bad hosts entry is added
  in /etc/auto.master
  - fix reset flex scan buffer on init.
- Resolves: rhbz#1734057</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
</package>
<package pkgid="e7e2d1f0e0a392e56e8b35797a9f11ae9ca7dda75309272be69e7210b0bed157" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="116.el7_9"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-107" date="1564488000">- bz1734057 - automount segfaults if a bad hosts entry is added
  in /etc/auto.master
  - fix reset flex scan buffer on init.
- Resolves: rhbz#1734057</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
</package>
<package pkgid="6091502349a7c81fe38e2b6138f42b0aed52285248639a48bbe2366c34ffe1ae" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="116.el7_9"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-107" date="1564488000">- bz1734057 - automount segfaults if a bad hosts entry is added
  in /etc/auto.master
  - fix reset flex scan buffer on init.
- Resolves: rhbz#1734057</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
</package>
<package pkgid="99b9c1dfd9a16e731736af84e9f6c858843d8ed83a57582cddea6aef0dbfb9e1" name="autofs" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="116.el7_9"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-107" date="1564488000">- bz1734057 - automount segfaults if a bad hosts entry is added
  in /etc/auto.master
  - fix reset flex scan buffer on init.
- Resolves: rhbz#1734057</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
</package>
<package pkgid="52a94984f0ae2adb1ff92093039961b7ee26b4ae8d5aee5150d04365e89f4f76" name="autofs-debuginfo" arch="i686">
  <version epoch="1" ver="5.0.7" rel="116.el7_9.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116el7_9.1" date="1675857600">- bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
  with mount trigger
  - fix kernel mount status notification.
- Resolves: rhbz#2107752</changelog>
</package>
<package pkgid="455c05d6d0878e0c405969ac292315ee7a74afceb3f13032d27d6a1c1dbe1a6e" name="autofs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="116.el7_9.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116el7_9.1" date="1675857600">- bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
  with mount trigger
  - fix kernel mount status notification.
- Resolves: rhbz#2107752</changelog>
</package>
<package pkgid="f18be7cd160a92b93d0ea1319e8f287231d2099bea9dab531c4d0b9bd1afb007" name="autofs-debuginfo" arch="i686">
  <version epoch="1" ver="5.0.7" rel="116.el7_9"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-107" date="1564488000">- bz1734057 - automount segfaults if a bad hosts entry is added
  in /etc/auto.master
  - fix reset flex scan buffer on init.
- Resolves: rhbz#1734057</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
</package>
<package pkgid="e3870b4ad6618d4e5b7c4ee987127aae8d1d194cbc1ad54a23ff5b686b997f1d" name="autofs-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.0.7" rel="116.el7_9"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-107" date="1564488000">- bz1734057 - automount segfaults if a bad hosts entry is added
  in /etc/auto.master
  - fix reset flex scan buffer on init.
- Resolves: rhbz#1734057</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
</package>
<package pkgid="ada33ba2045a7d552ccf4652cf29ec480a954463bda35a56afa3a1f652dc2732" name="awscli" arch="noarch">
  <version epoch="0" ver="1.23.2" rel="1.el7_9.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.23.2-1.1" date="1651579200">- Rebase to 1.23.2 to fix issues with upgraded libs

  Resolves: rhbz#2073979</changelog>
</package>
<package pkgid="ea0f88a769cd19bef3daf03bd97ecb54ff8896975f07cb996b40fabdf6ab34a2" name="awscli" arch="noarch">
  <version epoch="0" ver="1.23.2" rel="1.el7_9.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.23.2-1.1" date="1651579200">- Rebase to 1.23.2 to fix issues with upgraded libs

  Resolves: rhbz#2073979</changelog>
</package>
<package pkgid="1a4f9208da86cb4c5b7366e9ae4f7aa3f423b16883ba50a7ebf80445a019096e" name="awscli" arch="src">
  <version epoch="0" ver="1.23.2" rel="1.el7_9.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.23.2-1.1" date="1651579200">- Rebase to 1.23.2 to fix issues with upgraded libs

  Resolves: rhbz#2073979</changelog>
</package>
<package pkgid="8f36fd5f31584b6a184a206d3b024955b59ce0b9ad412964a02ff043666dbdc4" name="awscli" arch="src">
  <version epoch="0" ver="1.23.2" rel="1.el7_9.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.23.2-1.1" date="1651579200">- Rebase to 1.23.2 to fix issues with upgraded libs

  Resolves: rhbz#2073979</changelog>
</package>
<package pkgid="67479d9bd73f566e6693e40b45d3c0248ba51ff13e9eadd52d3846e345f1cbf2" name="bash" arch="i686">
  <version epoch="0" ver="4.2.46" rel="35.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641600">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-30" date="1506340800">- Check for multibyte characters in commands
  Resolves: #1487615</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-31" date="1526990400">- Append '/' while tab completing directory names
  Resolves: #1495398</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-32" date="1551873600">- Add configuration option for logging bash history to syslog
  Resolves: #1160482</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-33" date="1551960000">- Add support for bracketed paste mode
  Resolves: #1573901</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-34" date="1565956800">- BASH_CMD should not be writable in restricted shell
  Resolves: #1693181</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-35" date="1634644800">- Bump version number
  Resolves: #2015565</changelog>
</package>
<package pkgid="8f726005a182e7a6d30e835ccbb77943e05b1cd05613101296886b33b9aaf18a" name="bash" arch="src">
  <version epoch="0" ver="4.2.46" rel="35.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641600">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-30" date="1506340800">- Check for multibyte characters in commands
  Resolves: #1487615</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-31" date="1526990400">- Append '/' while tab completing directory names
  Resolves: #1495398</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-32" date="1551873600">- Add configuration option for logging bash history to syslog
  Resolves: #1160482</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-33" date="1551960000">- Add support for bracketed paste mode
  Resolves: #1573901</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-34" date="1565956800">- BASH_CMD should not be writable in restricted shell
  Resolves: #1693181</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-35" date="1634644800">- Bump version number
  Resolves: #2015565</changelog>
</package>
<package pkgid="898d74bfee004df8806583ebf1a6157eafd0d3209b2ee5d8f0a8a91357a29517" name="bash" arch="src">
  <version epoch="0" ver="4.2.46" rel="35.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641600">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-30" date="1506340800">- Check for multibyte characters in commands
  Resolves: #1487615</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-31" date="1526990400">- Append '/' while tab completing directory names
  Resolves: #1495398</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-32" date="1551873600">- Add configuration option for logging bash history to syslog
  Resolves: #1160482</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-33" date="1551960000">- Add support for bracketed paste mode
  Resolves: #1573901</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-34" date="1565956800">- BASH_CMD should not be writable in restricted shell
  Resolves: #1693181</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-35" date="1634644800">- Bump version number
  Resolves: #2015565</changelog>
</package>
<package pkgid="881834acaf1f78d884612f2610a296f8a1fa3f0897c9fdcae61aa37d52668315" name="bash" arch="x86_64">
  <version epoch="0" ver="4.2.46" rel="35.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641600">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-30" date="1506340800">- Check for multibyte characters in commands
  Resolves: #1487615</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-31" date="1526990400">- Append '/' while tab completing directory names
  Resolves: #1495398</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-32" date="1551873600">- Add configuration option for logging bash history to syslog
  Resolves: #1160482</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-33" date="1551960000">- Add support for bracketed paste mode
  Resolves: #1573901</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-34" date="1565956800">- BASH_CMD should not be writable in restricted shell
  Resolves: #1693181</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-35" date="1634644800">- Bump version number
  Resolves: #2015565</changelog>
</package>
<package pkgid="da660104b68f138ff7f03623dd693a4fd4813a5403fe13d5d468b3c494d9c7cb" name="bash-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.46" rel="35.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641600">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-30" date="1506340800">- Check for multibyte characters in commands
  Resolves: #1487615</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-31" date="1526990400">- Append '/' while tab completing directory names
  Resolves: #1495398</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-32" date="1551873600">- Add configuration option for logging bash history to syslog
  Resolves: #1160482</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-33" date="1551960000">- Add support for bracketed paste mode
  Resolves: #1573901</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-34" date="1565956800">- BASH_CMD should not be writable in restricted shell
  Resolves: #1693181</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-35" date="1634644800">- Bump version number
  Resolves: #2015565</changelog>
</package>
<package pkgid="eb81a3a1b4d66177f00fc54ab619dd2d22ff71e13c5e0a08937923e77780847a" name="bash-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.46" rel="35.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641600">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-30" date="1506340800">- Check for multibyte characters in commands
  Resolves: #1487615</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-31" date="1526990400">- Append '/' while tab completing directory names
  Resolves: #1495398</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-32" date="1551873600">- Add configuration option for logging bash history to syslog
  Resolves: #1160482</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-33" date="1551960000">- Add support for bracketed paste mode
  Resolves: #1573901</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-34" date="1565956800">- BASH_CMD should not be writable in restricted shell
  Resolves: #1693181</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-35" date="1634644800">- Bump version number
  Resolves: #2015565</changelog>
</package>
<package pkgid="20d114047e4b9512bfa64f42752ec7a7ab66ea4e4a06de58e3ea1da929fb6ec1" name="bash-doc" arch="i686">
  <version epoch="0" ver="4.2.46" rel="35.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641600">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-30" date="1506340800">- Check for multibyte characters in commands
  Resolves: #1487615</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-31" date="1526990400">- Append '/' while tab completing directory names
  Resolves: #1495398</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-32" date="1551873600">- Add configuration option for logging bash history to syslog
  Resolves: #1160482</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-33" date="1551960000">- Add support for bracketed paste mode
  Resolves: #1573901</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-34" date="1565956800">- BASH_CMD should not be writable in restricted shell
  Resolves: #1693181</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-35" date="1634644800">- Bump version number
  Resolves: #2015565</changelog>
</package>
<package pkgid="265b2b145c5d1a2046918b503f1c0e1727accc5b5d3b6d9266ec4bc30d66217b" name="bash-doc" arch="x86_64">
  <version epoch="0" ver="4.2.46" rel="35.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641600">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-30" date="1506340800">- Check for multibyte characters in commands
  Resolves: #1487615</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-31" date="1526990400">- Append '/' while tab completing directory names
  Resolves: #1495398</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-32" date="1551873600">- Add configuration option for logging bash history to syslog
  Resolves: #1160482</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-33" date="1551960000">- Add support for bracketed paste mode
  Resolves: #1573901</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-34" date="1565956800">- BASH_CMD should not be writable in restricted shell
  Resolves: #1693181</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-35" date="1634644800">- Bump version number
  Resolves: #2015565</changelog>
</package>
<package pkgid="22c21d4e9ba6dea38cf36fd7ac8422f16ff57f53116b3f5b0479c78ffc6d9d36" name="bcel" arch="noarch">
  <version epoch="0" ver="5.2" rel="19.el7_9"/>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:5.2-10" date="1326283200">- Specify explicit source encoding to fix build with Java 7.
- Install jar and javadocs unversioned.
- Crosslink with JDK javadocs.</changelog>
  <changelog author="Gerard Ryan &lt;galileo@fedoraproject.org&gt; - 0:5.2-11" date="1340539200">- Inject OSGI Manifest.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:5.2-12" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 0:5.2-13" date="1345550400">- This package should not own _mavendepmapfragdir (RHBZ#850005)
- Build with maven, and clean up deprecated spec constructs
- Fix pom file (See http://jira.codehaus.org/browse/MEV-592)</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 0:5.2-14" date="1352808000">- Package NOTICE.txt</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:5.2-15" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-16" date="1371211200">- Complete spec file rewrite
- Build with Maven instead of Ant
- Remove manual subpackage</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-17" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 05.2-18" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-19" date="1669896000">- Fix arbitrary bytecode produced via out-of-bounds writing
- Resolves: CVE-2022-42920</changelog>
</package>
<package pkgid="f709185d475aea7d84f6547b9441441668f9b351c7c8e3e9d9209ad4733b4ac3" name="bcel" arch="src">
  <version epoch="0" ver="5.2" rel="19.el7_9"/>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:5.2-10" date="1326283200">- Specify explicit source encoding to fix build with Java 7.
- Install jar and javadocs unversioned.
- Crosslink with JDK javadocs.</changelog>
  <changelog author="Gerard Ryan &lt;galileo@fedoraproject.org&gt; - 0:5.2-11" date="1340539200">- Inject OSGI Manifest.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:5.2-12" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 0:5.2-13" date="1345550400">- This package should not own _mavendepmapfragdir (RHBZ#850005)
- Build with maven, and clean up deprecated spec constructs
- Fix pom file (See http://jira.codehaus.org/browse/MEV-592)</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 0:5.2-14" date="1352808000">- Package NOTICE.txt</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:5.2-15" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-16" date="1371211200">- Complete spec file rewrite
- Build with Maven instead of Ant
- Remove manual subpackage</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-17" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 05.2-18" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-19" date="1669896000">- Fix arbitrary bytecode produced via out-of-bounds writing
- Resolves: CVE-2022-42920</changelog>
</package>
<package pkgid="54349e484fdbf64ac115b3fd3da715dbfc8f8d2b751bc28f3e3135ce2ae894ab" name="bcel-javadoc" arch="noarch">
  <version epoch="0" ver="5.2" rel="19.el7_9"/>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:5.2-10" date="1326283200">- Specify explicit source encoding to fix build with Java 7.
- Install jar and javadocs unversioned.
- Crosslink with JDK javadocs.</changelog>
  <changelog author="Gerard Ryan &lt;galileo@fedoraproject.org&gt; - 0:5.2-11" date="1340539200">- Inject OSGI Manifest.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:5.2-12" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 0:5.2-13" date="1345550400">- This package should not own _mavendepmapfragdir (RHBZ#850005)
- Build with maven, and clean up deprecated spec constructs
- Fix pom file (See http://jira.codehaus.org/browse/MEV-592)</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 0:5.2-14" date="1352808000">- Package NOTICE.txt</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:5.2-15" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-16" date="1371211200">- Complete spec file rewrite
- Build with Maven instead of Ant
- Remove manual subpackage</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-17" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 05.2-18" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-19" date="1669896000">- Fix arbitrary bytecode produced via out-of-bounds writing
- Resolves: CVE-2022-42920</changelog>
</package>
<package pkgid="c99635929443c8739259db74d727acd7e1808b0d5e48701798c1a788f1b44fff" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="92e779bf4c9a6dd2fc37993d601a9273ca216867d064f32790b6fbf2996ad69f" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="3b3659ed77abc4f9e05eccc8c90d5143b6d482b7acbf50207003137a9b79ae4c" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="041e2857b4c912e17f7feb118e30ae422ad5714a8ed81619913c6fe4bff2488b" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="8ce9afd4a2981b79451af85f1a4b5ac61fac0665cbe91a0f249373e4128c44cb" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="43b8af9253efc27af181a9b4576e8fa8935f4c35df63b4cb7fd67bb87cf1200c" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="f109595b086c308929bc9511ec0c21491594486a650063f09579f8d884280b65" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="595d8543a73ca487c83db4f396c6d0c33fc58294d1d9850a4afa02ce87cdf9d2" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="c3406b86dad2313aac4c1e941c3d2f70653c8105ef51896ed1b6cdfe755fc8c0" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="2f5f8323f6514fee2e238033a67cac1ce578b4b4931b8590b651d88653971c0e" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="db0443a080d6dcb7b6703c2cb7488c651f373546481c7af53888f39c44d239f0" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="6a0a4365f86c0bcedb7517738ff2eb7812ccd55ddc155a6345c41d18792dbc6d" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="bda3151ddbd7332e0afc796f74c1b0e13ba520f684de3c5d11ee4c0aacc2bc46" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="6971c777c2597de685773649439c6468b38e1c266c249f16bcb3439a728d9688" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="9155e0287c572dc82b99b3755bae0328c5f28f8e3e0c3fb5f4f31bf05e79d490" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="d8eb49d7fd36df52328f29c32d45df3dfd7d0c2d05035399c8d48bd67c4cf85d" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="1c440b1debbf1480903753d99611f9a7fbe6b12301471d9ae8f08a02652e413a" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="71c9ad5abf545b6d5d8e4756d6b82b47e6dedecd21d317a5ef24f0983429d158" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="b20e8b9acfa6a1e61840eea81e9002d757166dfacd9ee8dcf8e407217ad47c76" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="400f3231411afa7e618f3ee6d33b43a19b530dda74ea9d4c4cd81baacd4f6fe0" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="7d06a1a513d7cdd165645b299bbf95ef6eae67a9dada7a52b588ba52560347b3" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="72030b1b5b14ed458aec7b37f2208edd7fee51ceb3fffb528c7685b7c51edcc2" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="2140625bed3a63c5c50ac8f2d38ea22e81939d906d71c104457aff59016b7131" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="22da5c934e5c46fae73f75fb7454141b48e4cdbb603ced70733aa9361815831b" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="7b684fe7ddb847ec6194622d8b77cdfe1584e83cd700229fab37c1d454a59d3e" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="f6dbd5fd58e4f8ae513b0cd87334c29b1aa490e3ab9095a9c9c967fe07ee0233" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="3ac44d400e469a04e1f2eedd34778bf7707a6ca102ac6284d53566c244b30e0c" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="a9c981237049e735ee9fe594679fb906fabaafdb59118aa8c683e06cae3ae218" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="66cb16a8b99d0d78fc8559305d58b05d9ed16181709c6f39bb986709e3103f23" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="8acac16e78e138cb487c2ec871792f29a860fac17bbd7440abfbc46cbd9a7417" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="3e45e5fe263866c4256078d81f3db32d5b8b98d353f575dccd2cbe94b4275083" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="9189e35ba477ae420579de4d0c0f9c9118eafe9701fef4bf4b44b4970cd05572" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="88cd87ab4453a2bc50e2c4c182d4dee1aab8a78d1ad65c1f1bd4008ee10beabd" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="fea8ad25fc314ed2c546435f14c6236acd0ded7a1e83f2a1d39a8cb3c9d9892a" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="0951b9ab353aac43638601d276dd323c1e0bb47d423cd674ded82422e58982a6" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="9637afaa39a76cf082db118f29b094683653c2b364fb4fceadb905335960bdb5" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="4a537156babba8dba8d465ee5a4052e522659ba92174e3b53a8f465b7b4ecce5" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="5a9e0e4010d38096894e91943a5074b55463572b2fe2a10f6c5a68173234954e" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="2e5886d5bdec99da179c20b8ebdb920d497831d156c367495bc52717373abd5a" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="812173e51272bf895adb85402e80479c5ebb7a17b77e3df3b2a479de16ca664a" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="94b021c23f107555361df88d8077716a83e837b118271c363cad5d34e09501ea" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="f7e1780459fb875dadde483120e102b18a856ba2cb1abf7619a89bb1c7401b69" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="3b8f9bbfccff6e0f0cb1160b2771af29a108945024fc39b14f6bc0f4dc53c789" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="3fa066f7bbd02a996527208ec3a743608cc1e534230f26d5434debf3f9a0a30b" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="a8f799f67492f6f495f23de1893eaf2f13121a9c5562f6c9a283da909e19be9b" name="bind" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="997b442bdf2fb37f26d325350c55eaa9820c08f4199c09cc58ff073700b78c97" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="a814c458c838a0cea213cc5c4755a6670971284634f6b6c45c2479f773dd0219" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="a77f15753293179c8bfbc1e0b6154c03ddf41bd08bb7a94adcf28d20c324d432" name="bind" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="db6d17ee5de032cf4885c05268c021a21845b933651b7dfc19fb87751793454f" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="97b7f00adde810035649ad2a483d730f514ba58e6c79cea7a1b1cf2ee7436d83" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="11f342a102da0c93ed85e4f8499f828094d629fbf1ab499e65fa785cb1a2f91f" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="c84e9e391dee3ef603b427b493aa975ed84911ec2760dc556009791afbd65e91" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="9ba14c3a03756875da7fe4d03ada9ea7ef2a31e38aed010482c92237c2796bd8" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="5c5a0e443aed7c5700f98f6865138258d925e2837a594164e845f7eb09fd4edc" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="6f6eea6cd9dc897a74d1cffd38f9d3b1c1fee1033e9a33ecb6b56143c21d7afb" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="7f919f9fa4a1f5df1755d92a2f72e9cfbb2ebfcc43e3823dd1194ff1d37fe4f5" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="a4392960bfec31f02b401343636ca01cb0fb2fe5a486ba2403da24c70a6ea28d" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="f83ddf8278c2d4729e2f892254435ac0b347228bce37648907b9323fa31dde3e" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="10e57edee991a2adb65e96a748cb31cdc3466b531e8909c086085b65f23ae00d" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="c5483a1abfe2538158e0f06b440c99791794d6e485904fec9eae8edce4bc7fb3" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="64de0d88050eda7f4b03bf791d4016d1568feee40a79358a4ff51c580ef02248" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="00af35eca78aa2fb4a99d0dc2dc94912869d4733379a74a34cd42be777bdc546" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="0be613ca36ec60b84451963b37c780ed19bf37a5f18b8664f4152f240b9090ea" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="18d52ea466179d9cc2fbefb70b0eadedb3fa1bc2b7dbe388aa6f78e7cf9fb201" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="2899d08a8c8f83736ae7667af67c98e9c5ec1bdc84a775c63e3d1e56d3f44a28" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="4cfad44fb369e0cb5c23b22a1ad00bfcfb0e89bfb0f07f5f0496da2a62cb01bf" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="807f0d180e64e78138202bd74abe4f3b39900af9b482ccf7a289769046647453" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="71f9ab562d8be8af212dd1e29984c9c3066a17add03af205173a2b905c97f37a" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="fc2df025ad0b6788e9f5c5ca1a33387eecc382202ba6f3b15bebd606f00bd3c7" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="05624c664beba88fc3d03d7b7857afc5a1a65c0e6cc35a759877ed69fea6f40a" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="7843cfa2f971dc85968782cc029a8d15bbf85c0b62d83b5f129740c82491af60" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="9bcbeb62a3187aec32ecb6d0b611243192866969c38d00c4004d43162509c7dc" name="bind-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="ee2121a4da363058c010c4f3705e0cc0ffaedae6eac66e50f354b6714a410c38" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="bd2e8b57188d18f91b1d72aecd4f1360895a1f40841ae30dcbbb50236e3dce54" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="559b1422295907c4c1e7c23dc2952c94aefbc47e349ae7f21493c39c1ea4cf3b" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="eb239049319fc15929264265cef147a317f03cdecbcca799db43db73aa248ca4" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="77e5e65e839ef4931abaf3326a953602aedcadedc9f6ff91ed5a163aed005ed0" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="471c9201c6f5046641257673e42abfa61d5ecc738d889c40313231f281d56a45" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="f0edc66b12d297620581801f533b554fdeed7ca135b6a2a909360e70acf7d58d" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="d7d6c2d3b4a3f8d691e8082e6f47a8526f31cbe539c00a14b1f955bed61d6c5c" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="85709bfe0678293c228b8252378a6cd44be5b7088119c053b5d100ad9e67389f" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="f20e86b363c05ffe40c638026a4114a9bab6e905b1f45a736e9a8559471ed374" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="5de41be81ae3bcb4cb2a355caaab2fe3855365ee7828f3c179dfe69def58c3bd" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="9250181d8726508c2adf084a90700da66b50fc56a66d85be1a62817bac4e55d9" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="220c15d92e3630dc5a85c232a854f4f03c6fb7094f57be1c5935c3b497acb516" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="0457757a8622a6bc183c45bf0e554ec0764256bb4b318b7786110a5060b382dd" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="99e9023a8affb68f34c390fcd633035a49ee703a0391e75889f8c98c574fae16" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="9e1918a17dffbb708f7f5a7a3b6c78e47eb172e0123aa598738da673a78f827c" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="2ad71f35c08599327c2efb08d3f84230b5d10ad5316ffd1934d87248dd3884fe" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="f09571b96744b90da4dc6f62b92f69f6bcf7991b86f178b2e16ad475688ab8cb" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="85c3dec817073c007e4b79ab784a21836955efe74ae588233a92dc64b0922ae1" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="9333ff1aeaea7d90951a832b8af21fbd2c1b203e85a910f88b46d11b0c6effb4" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="6c9405f9b38f781adba496c23d303513f6c606b8fc85e60f735a566ae0bef881" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="af1665497bb5ad6774c8f8fbc6a7b0730d1dab7990acfefd0275034f606d9930" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="3064a28659c1b8458538429fa40f7faf0ade2d3a396488f9a7e505b60207e02a" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="9421be879963ee41bc6678c8a8efb83eb7870d609574b106abf2407538ddeb1c" name="bind-debuginfo" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="d959e43f1c9a357632ff343791cbb11c927d47fe4cb172bf23f7a46472b83515" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="7b078b8f2c3aa2df3e9c39e70f3af870de5e8cd8a2e07a2dea25e617b1a08559" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="371e01d013c670e1e840615ff1490e22357bad1facc72998d46d5bea2d112e3a" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="b4e58bc260cb330ff43d4e28ea3f4492b70d22e486cab9e8127df5287bce820d" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="30a743dfecac10005550a47e23e8b9fb193717541c319ab448d159669a33f98c" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="9f5e2e55e94e2dfcc92650fd870b00b0871a675508fda61784ec6038c472cc6d" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="bbd48c3392c07779dd2087fbae288e6a5bfb12d5fec2315a4f794b77300a35c7" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="6e9146087cda70f66144bf6f3b305f342708c8124d96f45d8fadb560850a3fbb" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="eabb903fb1952626f0f1f8bff0ab849709fd1439874beda719fe3821e1b90789" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="e9f5da294f28bdf63ce771f6bf2f67998f77d0357913d6fcbb1018c35885e400" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="e483833950dc1fdd1c2b7a53078085759f71683af47d984539c8b2f4fb4d78a5" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="469d01dad6288a63335ee2a3c60a4c0303db4980fc51f7297e4ea9a67b78ebbd" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="331485944124bb5b45db81f445e9649b1a0cf1cca651adae1f751eb94f0e4804" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="99b50a704476c0f01abaa35d7b577f5925c81743424bf27797d234c2f2135656" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="00d6a167be490e16cc0c0119497fe4cc06492027822020b6260d51dd1fb19706" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="1b31b522224a63f492cacd0f5aafaf39c3097dbad0a0edd7ff066517dc8fc96e" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="f3db5962fb4e50d9e9c1dca1a9797997ccc92c7463bd3e1e02b517d3ae19d0bb" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="37a2f71369488808cedf6771c9d606092fe29dde6f82c8beff86fb8bb2a52057" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="cb5bd9992ccae4c9f95f937c0f23160eb200803844b0ffd6989095cd05e53e6c" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="723c8d7c7186dbd4f504738fe2063f6f9d2073fdc050807e4a9167520c008ba4" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="34054542853dbd4f673fd33ffc699cb700a01255b04170e023a7661bb6d5dc43" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="dab03aff47e5d6c139b7eff1c36e190c6b52c6fac653cc6f421d49d08a8eac19" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="307bd424bdd52b6397103052bfa7283e032815d8e69b1a964143bfb03d1f016e" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="312c307c7029a4eb287d3186fb7144bac4f1706d2f95f2364de6ed069ed2a3b7" name="bind-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="be2df28325564d48c8ea387623ca8ca866089e6bf962d73b9a89d2cc6955476c" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="3dba56ed7d7bf323b0bac53789c1b40fcc81b19e1d6842ace9e19eda125db08f" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="62fd47cf180b9e1c00ccdf484c8865482ddb356032e00f474625f245ba6d3af5" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="ef3f6d57c2bc718cf17c56288a4764d424d0419f9f2cfd6e9cd2a3b3bd829e6f" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="29f59a0672546b504fc6f24703baa37ea6fe283363578f89e9910e65981bc5c8" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="8c167f56ec06399925bcbe62db591c958369f5f0a96a083031618886ee910bc0" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="7be6021b7de08220f54118349b58c7d4d95c995d25c44b1297e9b3173221064a" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="b8a7141841323033145b891b632f0e90680473efa2fc39693a15eb5cb403698f" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="860a2b1523a81f950505aa7933fda9a5c8f298b4fb1e9b036c5bab5a57000210" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="6d3a1c6b99efbc7ffeef780f4da1a835119279bf58b9fac7605d1e0be898ad84" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="6fc68d9452b2206da60379b4a7e0fdbb28f3f8d7fecc2232ab5672aeeb8f1a13" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="38a88e94373c4e81922e807d427c1d9dae6848cc2e0120bff2dcf308944cc592" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="af507ac2b1d47619f347a2ddf9bfa4d3e98d68bee475faa300004a4ee5bbc064" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="0c1795a6c34b0623fc14bbddb327dec5fb7d2216d6b74926d600e3612619015e" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="21ef4cf5a2e622a47ec2045a5cc21276c57a5129d7f05273514b186708ccc4a6" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="a753c10258de81d606d6313aafcda2f158b7cf29412069e82fb9045955e7b553" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="b13178e3e79861239e4b76268a269a2a0c721f98dcf3fcc49a5a7941b28f6ccc" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="db0315b340d6e25b88e2d555b9bb67f46fe9ab767a10aba0860d24318d701222" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="6818701044b47f2e818083fe41c270d7d77641435b485ebcc2142d5ea1943c34" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="62e5aca0481ba1b264a68ecad1048c5e04aaccb165c986bf9361b9e1fc3911aa" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="7e2930694dfe2a878337998d51e56555ecc722aeb1deefbe7881560bc8756544" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="aea3e4dbc415d0dc75690e4f95768ce371aca0d3ce97969b8926b2c9998a12c6" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="dae09e637e8ee7c72d2d34d47abec26d02699a17acb14a4396d14a439325c4c2" name="bind-export-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="c3d315f1a4bb3166db8d170a8cbd3eb6b1dc53ab4b1c2ba8fb35036f298bf591" name="bind-export-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="29cfde0422224a00d85e1f72e3618bec2bbde7370a36b57887ec6fcbe6b23dac" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="6acc7fa828f2578ca2def346162549c73d2aa9cef4ca17e555a97250c0619bea" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="81a56e203c27d4bc2b5c46f270497fccd021a21f85548426115835a411bdc169" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="0b3e122f0a015dc83cc043d89f39e723febbda717f818bc2810849b091603def" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="c51aff81c02f51f28d421dcc5963aa17effbd16777814f3ae3a765a70eda5a55" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="26cbf3bc6a9f242b234caef71fe3fdf7ebc60327732d7e9057e07b9d11ea9276" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="346e824d56ebe51945f139faa8f9d78a413d25c222a8be78b11f67bd8798ed70" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="1b6ae230208f537f1bdba009c29504add89bab70e509eec0d01598b14b1ae71f" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="c68ef9ce8d6a3cd20a9d8b39ac5191a7e9b264be32b90165dee4c912f4be9289" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="6ae147d0379c5528cfd09957547b3202002548cf1cdec9f31298121879fc2a41" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="d7670478211206ea8231977ced856ce54612ff96db4c61414078f81e75fb36ee" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="550aca60f6266579886898eea7e2ed2cef0d26ad1e28f2523e8de6fc93b2eddf" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="b02f17b853dbbe267342c624d3d8a3db4c5b7832bcda63e74b6d1482e8a4fb27" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="c94089747b61081dad0c2c43e641894ef825733d34488d810b1d96c867aac501" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="bc63ef9a13068319d0d50bf8fe45bc9ab1525dfe47f0ee57859868fa5eb67ef9" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="f4427f10a7d8a601a642eb8dccfaeefe3a92d9874f00b607a96b8a67e2fc0272" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="959e454ed9cb1704c056e3adbc875b93f31200beed1c40949f604565ad589dae" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="7e48998235d9cff83021569417a621f91355b5f8cc96174e5e98f33009b9acc8" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="d1b368b164e5d245711a81c79b785fcb1181549abcc8021a431a492573398e2f" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="54f4c0dd5f35e580fcc2967a7e2d1ff164cef59ed04d33f9c114ac8a8245d693" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="d06b92589782a5468496a587c56acf748322c7fccaebfe9bccc8206a03cf67b6" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="24bcdd95149a53c613569f21484cc258bf52a9526551ec11aa0aef5345e20f9e" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="1ce130021162c59ebef4c088bf20e8962b53eb3458bb889d35b282b2cfb7bb39" name="bind-export-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="260b5b453a15af6b9f59ec765c7b64194fcd53932f34aa0a55eb8adf9280309c" name="bind-export-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="ce1fbd137b04032604a5ef173cc98deef1e4b6494923819647e535268d5079f3" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="8c159b76dabdb587d04acfe14b0dc22006dacfa6f76ff0f348af594e820437a1" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="5760be753e423528397e12db6ceeac55b405d167b36f203dcc7fbd2f63407a9a" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="a5ca5a169559a3c6a6adcd25162672bb20ea7b0666bd9f4eb00d07f5ad29d2fc" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="ddb2ea0219aa1d32c6e3964df60faf939c54d5868df82f019a0dcde059ebb507" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="7fb5909153b9b7e69c20c6afeb825305f8f7fe8a2f473de4328d4a475e6818e4" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="32d5a544be13ebb2909304b515def8814ec231411bc1c0afffb2d65544d61622" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="ef5edbdf3d8ffefefc94c91ea8788aa81060e75f1c3d81e6bdbed8d6f0c82141" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="87c7329d286cd96c7a5b04df4a6a2e9560043a808d8c8cdb400381789392a54c" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="85e13a21dfc1d7a37a69eb013a7b4852a5a84789f4c366946d1fbd6af337d7d0" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="ef9cdb45ef1c328609bd132220daf4c218ccd68578416e625c5d438d38982b12" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="3995b1f2c0518e9ca0003017376c8c54350c2c6f875a6720c1b4fbc9c673414c" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="e6ebaa1863e4f7bc08a5c5652048dac15e7f9c8a8c478b389c033483d118c7f4" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="04af8cb05038564862ba3a0b8a4a174b0435900610b2ec710452cd5051436548" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="39553f34802bbea4cde247b6fab669a7a1c88e3eea6a90ef902232efe07d32ca" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="30750e33dc40103da3547a83e11f1572ad2c515b385da290e65194d96a7c09a3" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="474e393ccd4eb6a769dbf5e25156dc891c12dcfc2e8abccc30e7b1bc74a2a939" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="4a29c499bac8869a942f55e85ca1a4d15d3e41bccbfc3d06281010461974d961" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="ab8b1aa16ce970d1686b8ba036fc09ef5de2e8858839f49143929db32c4050ee" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="c253597157c7003fa412187be6ca6ad1d97b620a2286df7629eddbb30ee4d0ca" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="b37e4539feca2c59aebb6036e7d12b950cc5d9e0b7919d28e61719aeefe9ce24" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="065b7cdc040f3a3540c2ec5ca60ce34b2d135dda14c63ca19b4cdde9b1cee97a" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="65fff7a9c0a9db88ff53760b4113590fd130e32c2a4b2cec2a4a5d5e0fa216fb" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="fd07aa749287248169448325795ff7077be80d5539b938ef56e87b21dbd219f9" name="bind-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="bbc7e1331fa8970a1c06ff8da6c80403bbb8693ec01aacfff1524ed9cf708adf" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="cee4f55b4d2deb4294cb37a32d573f106a0284e5f94b917bca1f4e67e6d6f75b" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="da358823fa57f9ccb0ae52371c7b615b0148077452aac114f28692a4caa10e89" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="d5f01f3321c5b70cc57f53ec4e6c094173ed0afc53160923552831c256c05950" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="7610f1fc04dbfde9129ca4d4d983cc2a7ccdf647fbae93015fac339be41d2b6b" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="b9de4de45ed8e10bae0abf8fcf255ae56ec4dc06a6fc6fe68116c9d49b2dfe10" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="a0c56bd7ec1acf29ee6348e402964a454372f494c7738b1a0ed3a08be64f812b" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="5852a5de3c295dc4d675baf0d03bb3492fc072cde4c01602ba34708b3967e39f" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="7e2a8200401f7025e1b5954e447e1551f647a75fa5241a2f8f3408ecaea5cca0" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="f9e8765e3c8963e9fe2f9f1b20e348d951d03ae342d4ff9ef851ceef3abecf0b" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="9d98f593699d4e20fc79f05bdd56ff6090ca8a583c2665298fe4da02e7989653" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="9a973e50d3b27ff95969357e4b3a62afa72ded68d00747d150cbfaff1e065b4c" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="23f868cade156eb3859b4045b5c2ece741d9e1ef22c6ae73f7055c2c001d1ec5" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="1f0573241a0b6bf9cc52fa3792f9e7d48faa4d4e918b31396b28d41afc67b07d" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="42d92d0e64e3ce5fe4b59c758889b3ef709ac6adcb86381ab29cb8c174790ff4" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="56864cc5373acc71ecbf850f32ae80c821a0ba446f3463b6737443c8e7db64ed" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="f837de3731515b0b3e01c55c2da25a02a6c1632bad9343943c8be2a0dac933fe" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="29fe407820ef26d6afc8730cea8cb3d025d1f5c8b99b5f2e018159f9ae171392" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="2da73d2aaccf5025a49bd9d86ff9d58c5ba85de943bfdadf92ecfcec9dacbe44" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="db0befebde4eb9c7b98b9fc92b7737b7a85aa2bcbd5e398985556797381c60d4" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="97f07d4ada73622a726ff2b98921f2acbb3e492e709f80308c1aa9414e147b5e" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="507218d3f55fd99829aa4d5621ec933adc1ed353917d30912e237ba390a6d39e" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="8c5cd96c38a580632d420d5c04e254cd9d6411a9353980af74240c401cc16c45" name="bind-libs-lite" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="3d52ec1ff1b7b8a59d6ec465e3b6a83bcf456deda75f04d39739dce4692478f0" name="bind-libs-lite" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="f45f1714da410dae897310bdd90f4520d3c724bff107fe4c7c59dcd128c9fda4" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="6ed2065c00238fcf2999ba5ed8b2311b0e5891e685293908e4bee02fe020063a" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="00996e0072c6f6a395e8852f8a87f7bce2c1ef9ae62c8a9baa646cf443d88154" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="79f0dd2dbb63683e18094121e13910bb2e05869a76fca20c3dfb7c399901bd23" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="2b4d210752522831adaa8a5e60f292d70cd657c39ab604be7e0f52d26ab271a3" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="a5468c43ab30bee2b23452d18636fd01ca1221c65a89387be434b2d50a830c08" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="731dc9fdf1aed5ff9619edeb50a8169832665d39d89765c49dfd5bedf5d8e0b8" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="5b12f9e7ec0388ecd351743cb3fac675a457b0e23646403d22551c6b61909733" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="f1c3596db54dcff073e23dddfbfc90c0ef523f11b02d31f398318dd1d9534a89" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="a984aceb2fa749e925b6e8d0e3a01f91474bc6b358c7205e10c7395dd8b79487" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="36403d21b176bb86076955f28777baac6012611a21ff9fd8be7a9113038f3fe8" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="973b9621169fd1a8cd2e8e824887cec864985e520717a6c4e6c4a03e74f0ff1f" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="bbb22edd982e029e673fbf84cc9a0d195cb494b3c31a016ab28d5593f2e596fc" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="9e5084c8adfc931c3606bcc2097eaac081a0ac61f757d1a132a8a214213692d5" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="edf8f39f8db1e0cfb5f00b168bc19e27adfd6aa23bd7c0d064e07584138ee9bc" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="b19645dc5279fb0f81a8b7f2967cf20a40506d2e592a20358674556766cd723e" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="56d7113d7ff7c49345d166e51d2d875f69268094fe55ad15db531ddb3d4e1ee6" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="4022b38e405f225e770aad034f89477019a90a83c874b8084ef6d87d76ca21a7" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="493885b5a88380dee8a360eeb101185151d97410dbad70f4492227e45dfedead" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="98a8b9b84c996abdecd02de0be550248996dbcfea653907cbd6f09e935024e60" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="7217295a17fd88c6f52eea1705105423e0e85889e889d1ac600a7ea9c2c5e4cf" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="7ca1bd0159f4f39833c62816bdfc96325364a98486daf2bef4e8d0d8468521c4" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="4ac4bb6831c358ab3512dfab85cb95df552cd17539500c13b96375b7e7f075a4" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="c223707300fc695441b583bae3d932801185d0522ea286719ac2ee5f72ae9aa1" name="bind-license" arch="noarch">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="c58c6932ff18350e9d157394a5185ef06d7a1a00b7e38e98ad17402ff639c09f" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="c485afd5021c2f1fd6909884ef175675c9d68f3045826b818ad39e10b9a14a65" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="9576416af0189e82fc9f1f11bed02a8ef68471a48452a7fa0671e34863bf0ed0" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="855ab59272bdb49fc87585dfaab40a199a9b66f79b11ebeb1c09573852b94682" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="7a40fb98407ae5b1f17f4ba661861e8d60d33fc403a083ba22301046a23b04b2" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="401cb783731cea512c8f893df46b1489b23aa4f6dcac89b53e87ba9d2c9b0d95" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="d6d966ea87e413bcdada7516f77089cdae7d356008d8132fd5b5d4323053cf14" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="2d66b8d92b0c43351964d098154759dcc4c11b4edfc5ac2703dbaf0b8b86de52" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="5db63a59b51fc08dc0bc96a23fcf9a09d6d902a74841d65c82455cf43ebfc372" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="ae91e9a1760d544f2de7e985c264b0be927006267b54487537693d662192f841" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="ceb7b2dd3cacb182f794047b2df8766a8b2232f7ed08e561cdd3ee6253e531c3" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="be9e5981aef04e6b7e29e3fa649916121c6c934f4a1863c093df03d1ee8f60cc" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="9fd30b8f098fbba9d2b34599b53c20ace3071a0c0ed77a2310d8cfe559b78518" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="14a3b577b54f14bca5370a79921071d314286caf55f6ef831ff52d4eb57d92d9" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="260c22b08f8ef6ee2d0e8fc45fc8eaee227a2cf2265511cb428f379415871933" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="835535eff79f9013037c880a7e61f43711d56e03e7c51c59e6dc49748822455b" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="9aa5413c9467268af685c17452f9469fa9760eef4265292bfcc7dbe3951b56f5" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="993ef45d2aa34eaa9ad6afc6d6a0f44be37477c6ffd708357ba224188cf71732" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="37c5a885fd8a45949becdda749d1943e66ee76a3510d0dee797fd311bf5d0906" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="dff052df501b8417c85d7dfa7bcea537f5d4c6b089d3fedf524f2460e3e9a18c" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="ce2c06270e415b83cacbb018b1f51f739feae3bdb453a0f469761a64cbeed5ca" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="d9e011da28de58507d08cbfc6b90c425e9e6f5eb6a93a3d97d5e1a75c82e4649" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="5b4bd3a11c06003e7146c6e2f431a1b550929d845a0d209bf243aa745978a731" name="bind-lite-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="4e9d3f4282a1748805499e52eced0d8a8400d9f5e70d1532086229158fe520a9" name="bind-lite-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="d0157210bb64c0394138fdfbe202b6081a368c0805fab85fed39c36c73628d2b" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="12806b2bf6255d52b2745f136e0a4f607117bcde5681a83401a835a77ccae44d" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="b64aa1affbadd9b2e930565ed84a2ea866be0216e015b0da20a28ae0370a4e9a" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="3cd66f2144951c464aeca0870fecc27b34e00418fe5fd99c2da320ab8cc5c1d7" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="e32d62c7eda29379a8fbfc16c78d39afc9f8d926cc0d75338da1e4b8e6ec2ea8" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="934b43543535f6eb52a61c8e942062e3579cc6b6a58b588f29449321ff5fd223" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="fad5682c6db9355d37edbbede99dc7f3083d76eae3709c881ba9570f5ce4eb67" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="42e6add013fce74e9cd8f5f7cc1017112e91ad690aad1d13a50744366bef5636" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="d0fc07146e1dd5512cee8e9ff1b53b85e3f02394e6ce9010f557bf262e51757a" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="996707b5bdc4aeb722231be3126b866acef7db124d83eee5f4e7e77bac9217f0" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="6f45196c0967a80218f5ba805f1152c2f80e7d10ae75f9722b98a62c2ac35ba7" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="3b669e6c7575759246ea87ca19db094a6572e7479315b936f6c3736adf99a85a" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="4a1ba80784b714954d70f37bda24def30098db9279cf007b408393f0a5619cd3" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="2cd9541bab828adccd03dc3158b8000cff63957fac1d6b7cd4eebfecbceea9ea" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="90561c57901967d35441fe529fa0415f83579dc6ea22a5f6a57e00e49c8988ca" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="7d5baabd50064dca11b15c24bc2c535db1f217349ca917ba16a5183bcca2f209" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="f2f208c1af352783e9509b2aa5f1b17987a8acb6a27c758f6faf7a77ccfef6a2" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="3a8e0de15a88b979ce4b17ad535f2b2d06fc1f28ddf04826906e547995cbabf0" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="c16a3c076f009cce4284dfdc88b602b99e24b4f04dc75a7635d68e47c43c51ee" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="66b8b7520c039fea8e4d430e0078eaef230eed8f62e961cfae7ccf9cba802961" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="e16c3cc4c74d6fdb39488627fab302c8d95add05d0c8bc19b229594c281d88b5" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="6effb4a0d6d359472651295dd62fcf3f6f1709ebaa8f571aa63d0d97dec9e3f7" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="e6a8c958a442f719e2e7d4d2a2d3d906d00af778ff898f7cabf9b2ea15382562" name="bind-pkcs11" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="2dc9cf1f33cf81ee47724f2fb5f9dc05c2cd535262501434cee09291ba4df4cd" name="bind-pkcs11" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="62984b1115f8e3326fc2d61ccc92734f207fe5f3666d8c8529456894596b4910" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="41cb00b717f778cc9b5911d8fd3b322a12d4c398432b108acc2c9aecd14ba6c1" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="8f74edd234920f8c7dfbbe086adb1a168350d84d4959011b32338371a499daaf" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="d26931a72676b12b2fb0c6b05a2312f3616999d75cd67b09c6812903a5d314e4" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="a215e1be52a5f79239c335caf9d5927bafe73753317c2e6c061f5bc4b474f4ef" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="d98f4b4895312a166817752f8bf4699a0e23946e935a7ab1ba0efcf7d6b46552" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="2c1f271489615ff97c465b437ea87643b99a6b7fc54eeec29a0154bdc397cfef" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="fc56e3097921f368ac93e7039990f4c799f60277292091efee7811b748791c9b" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="68385ba03f19c1f679391d2ea3180b4a7b3515280e436db5ee699a2666439d51" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="77b58181a4feb0499acff3ee822970c656b28969d91f55d6df64d8da35e7ba5d" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="f08d9b47d4952aab6b59ac1dc0e11e78d5d5e6a7e0f510256af3cea4577482d4" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="70f34e059b534a4c97d45f0be42ea80e066ba65313c5d9c089e34664291affe8" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="6567d18613bae8887fc5c881b691f04e5bd4cf21d91f51e17fa7c6dfaab8bd92" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="4ab9e13e569382aebd8ab2d3c5b92642e70c4ae8d0404c9f8b2beff031393c12" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="9b0a1a1bca01d7dc04dd99b63662a5434218f7ebd052cd5b7af80ad55d67d9bc" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="84037d6f0f695196f8c20d176d7ca1036965c097b6dbc09676271d0428171900" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="b3d299cd794b7be88a4a49edae92ea5ed7c838b36c9b07cb0392e67ea2425089" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="2b7ab2d3c07157e1d80dead22011c5f5fdd335c8308e717da77299e858871f9a" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="412e2087095cececeec4306ae2ed73468c2f7a18360790d18883ee3a6306946b" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="56def7fe2f46a00dec710ed394212e8b62293ff7a86147699acfabdbf4ff78df" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="c12ff7c7bd769f9d9172527c69134f0ae0eed20c86c584197aa8ce328e061bec" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="dbd24b743778eff2bc8b71380ab59d902bf3e72d95bc8b23350d43a91614107d" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="b34ad774386f18ca641707d15c8dfd8fbe0af0946583cac48140d0b623e5871d" name="bind-pkcs11-devel" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="5cc209f47a7f552d57e8d8576b59188ffb79862e1eda45bf7e56af5e7b369e65" name="bind-pkcs11-devel" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="4397de260c9eccb3e8a84463c6ad3990ea08b76c272762f798f9f72e1945eb68" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="c129b1672c55479359c7a35b0b99f6de0e021855754eb804c57e2b371e1b64fc" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="dffdf7e0565876d0bb960cae19086017cbc7006aa1db8262225915d4fee68ed1" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="c780ed77b63570fc482ac8cf60947cace6041b578b0ae8b293292081701df1e2" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="81e6cb7adfd767bcaf9e549d21abc7dcd702ffaf2662c73ccc1b93f8ae1ed025" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="ddf92538651ac8f75359b01c04a8b585e9048fef0c7314319bb0beaf237726c6" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="59edd836c02e7839100b7e00d1b18dcde72e46d8bf3ce5ef46fdffceaf38997e" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="6415c99bafbd83e397f0cc8d82e6a5854ce6bab005468896d9ab5253ad43ce86" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="2884fc51f1bd96e058b006e9efbee8e936eb288145fa53d7026e529c6ffd56d2" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="f2a8eb44a36498c911a437e7b3edb77e222de8b47677b4f731a00ce727c6fdba" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="e0b676de47a4c9203971261fbf8cfe3504b59a7f3ca448468fcb0c34c34a5b2b" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="311cff0ea10ded774d27f1069306ec068b2d51f63f4c349dc78c024758712275" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="ba45c9db8de7498f0e8aaf2a7036a7f398ce97b98396638dfb354944daede6bc" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="b80cba35da98d7fb3f9b30e8ef4ebff9a2cc40ea23f22110fe482e0d3317fad1" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="3141da85bf910078c4394a4cd6eb8a7761d35a8579ae3c69d342c69000aadd9b" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="0a4536ecb6047f1ad5fc067d8dc14e66752e9b46b38fd3886cf5345630ebfe3c" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="3d39e6b3cf8b8d0a90369e63db74d5ce7c553d191fca60aa40c3c9ea9832d640" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="e8f2cda70ca3e8c133b42aac479b5bec53d2b65ec957268fc93080f1497b1952" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="3ddd817441cf63b036fedc33aed2d1315775468fc63f5ef2f0d06bf785d0676f" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="7f29e4b5af7578df9976a7dfd949186606e98b49d20e1217ba54a7f4cb6e955d" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="9e1d6bfa100330f38ee3a391872474411e28f8580434f6476b6e4da2b429ee2c" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="82b8304dfe7ebf8ea8511badc2c291f715181b84d8ccaf5bcba32092f46d2d83" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="a210bf6bd4b71f7c91f83819a93b0a47257c866222f26f338059547860d64005" name="bind-pkcs11-libs" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="27e1f2f0d4d9aa3a6aadbc240e769e6997e2fd512b63c533479991a310df60f5" name="bind-pkcs11-libs" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="e17774a7ccc88cb0034a9c329e802e3728d4b42270c279fc6faa535682e036ca" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="8d2a9f8b57191a9928a92731440d89049316753596ba83c377e2c2cfc124f98c" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="05b4c08540baafd7ad10b008b2a25e47935ca0278bd5433dd0e68d923dfd8e0e" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="23a72bb48d1f0a6dcbab7cf5912f6330c3873fd944f3f9c63f2bf2444315c9b4" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="e8ac2b5098213e4465164fc23281228e88bd62e70b5c9204ed56a9d5d41abaa5" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="5d4c6a84da789b3b07499edada9f89ebf7d30139ecb6adb186f5237b3153f9a2" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="6980963de956dbad918bab8a55bb4633bd661c176139ae4f4257b12aa3017807" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="ebcba469dba046a232acb6bf7b3f696d3a5bc4870e69717f1ab91b7890c2e5a0" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="b5ff1aedc4780e3767c94e82253e611f7483a68a438973aa8a3ab31932ddb447" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="5fbd5132f624914f347f34b4a5b090271bce88fb30e0b2c5f73a5ae29edc7cf8" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="0bd184542d5b80a4deb726e3a15ca566583c243f673f9c9a09da56cfb299cfb1" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="b7e4dd5e70746315e493572a246ff11012d0515c2ed84f8bca4932ca19f59bb5" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="74d9738f0fe0127adcb139ce78a9d8449fd83225d2e49bdefdd7021b46b21827" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="97a197075417e72e30dc122b0bc2709e3acfa675d06288c3a2d14f06e90e0389" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="a8f7c406f03e5c7bb90bfa83371198f44b5c9a4188c23250e9e2905d525afc5f" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="ad071016e53edde46beecb7babea5e692de231b3f73f0e57c9ad9b57aac47072" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="bf126a819418054130fe2e84750408cde77f28e191adb77977db0e0bcd8cbf2f" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="964539093e999cc55c56ea5eba6fb31e5f58fe286dd45166934c505c7bd8dda9" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="7aae01b7ddf9ef98e9c57ca2e46c622cef4a514d7d80f21ac3032e757e94bd99" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="e553d84dcc4df8ef216895909eb5194c3b46aadb03e816673b9cec1b9cca5c44" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="cb1510f2a12cd5d2f92f0d93cfe6cd6ad0229730766082ea43f57a8bf779eee5" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="bb6e71f206c89adb20231d4146b62ede3128e40e47380bdb7d4bf09cc4d34270" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="3fd6ad3f3ed6a9abfe42abae507eaa45c4af34b1c7402300ebe4e3671a542bb0" name="bind-pkcs11-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="710807281d6dc5233c769eb7d8fe8abf1146a92be3dfd519fb35fd2f7dcc45ed" name="bind-pkcs11-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="fd88cb2479e9201bee1740790440ffd097d1fe2944648b1ab6b7ef2579cbd27c" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="7244f8b26c944fc18725f15dd655b577bd0040cbd03f076186ae8a5cef59a366" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="6b412926671c416ae66958746768e7ce4489af2a246b5e8695d794c2b83b4ee7" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="d158699638605d63deb98a6e35d7ea40e841dad9173d50db315dd870f662a2f1" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="0d6035d7cbbd9c64a37ddc090cc6ffc87edddeab25f2ee50e703225d09ae7015" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="1f0aaf2bc09ecdd0aac141e3f309ade1036d9720d43104f8ae576c8bc35bfe87" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="d3efe94cebe5410d4a22298da2c3becb3cd8e07e60dfcbfc93e386ffce8fde46" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="78e379b6965c46afe9f2ce49e6947ab98a30082fb09cd186c8f5ae056bc442bc" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="078cd7472a4dcc8533d1007a8d9d1fcbf7e3331c6aa2315440d8ad3b8720f905" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="454967d87151333a878b3bf919b6e2a83840f48d6d5cad7391c57fd373e151f1" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="c1a7142929b950aab8ed96ca186dd04c2946a51c823bd2e6b91a1044820437ab" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="42e614f69a44cc0945f31f2169212766bc80bf9bab9a1d4e5be7452a4fc1ff8a" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="7de0e28c3efcc280b2189913a83a445a7803f148fc6b3f35fb6149ae7abf46d0" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="c1906c2d50a5e50c8ce689a2bbb1d4abdaab7621c2d67e43667481741bc8054d" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="a86781646af0b9763f962c8c4dbea0eec41b47b23847653e208513ba31b0dfcf" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="223b19337660028c4f582689f68aed237c4b096d8d157c7c18b7a0ffb8f145e3" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="d8bfdf6237fee921b027f0bbbe70ca5731040a441fc023572b9e432675f424ba" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="8354cc554952e9a6f1c520c2c77120f86f8f9d7afbe4ece9e4e30ac285cbd7cc" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="86ab87bb9134a2437900ca2aa72aa7af4f7e1f236c105195d232f1a573659f1e" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="d42617c44de5779f54169168c26356ea1b970024e2642507283a8eea409b8732" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="dcdeadd7b0371716dca676fdbd33f95b810392e8e11c7a9bb2fcdd78c90bc1aa" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="4bed383e71c669577c0f5bbc07db15e5b16dc80b160ae8231d86f1f686c9cbf8" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="a147e1f222312b1c1bd4213ae305a1fee50763fae9e4d49ee5477bcd51b9013f" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="cde603dfa16b50f658df2e5356e3c83fb396cfff4b5cc75a5dda07a676edbc72" name="bind-sdb" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="81ad38705d763f658d30cf5acf29e8c383677e85fdbcfab9605358f1cce46dc8" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="5ec9d9aefdef71000990d34f6335f3324bac88bb80462b5c09680a100093a9b8" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="2886a85efe0be38b5872c4199f862a3953585b5be4410b1c4c356e585309aa68" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="dda8a29295a207dc6e27b47e4f42054d6b3edf1b74f2164744f20d98fa47b59c" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="5043183996de4ca60f4faa5b252d44230a31d98c76540cc5b0630b85c564622f" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="f76c288668e6c501202c3d8661a11dc263fdd169c2e2b6f3e6a69a800d1c2a53" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="35a894f9e117cc4742f4f3e8dc7a5c66d42303a7191499f62e735a9eb94df491" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="c63ac0bd9c10e7b92c56e5888aa845f7de97ee48f78d5673933eb6dd92f7969e" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="7659b00d7c3b7574ade186c421209399319468762d3e5da34751fd5909857497" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="aa8be59d7de411a3b2e5fd5dfc8483c01ce7148488228e087514d4c277d799de" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="19fceee18ea490dc9be2ac03df1e1323f44626e271b431401a7acb3c27147060" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="a6322795f095d641967330b8cfa916716520d7bea75fca62ee2ae015fbeae1c6" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="727510562384fd5980929b9c232b0d832ff82fb3cb90f305ac907a12e3009137" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="0a16463bc0273c09c835143c45f321100a5fd17646a32c05692ed98fb4f07d7a" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="c7ce400e142e354c4438de0dd4dece02821ca8b21c09a42c383ba893349fdb41" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="67b53322a4bdfac0cf558a8374214c78b0b9cf6cf8885b276de61b8df35b1a64" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="ff159396c05e87e815b633bb4f25cb8a10050ebe1405b4518bcfaabc36453ac3" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="e9e5496fde9cc562b5b7db0620ab60c768847c5fc96d2d5c1be601498113e988" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="a8481fdf059d92ecd3ad5ca35bdc5444822c2157507a4a183e8a88bd74c51734" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="e7ae0781cc1468b888d213f9cd9094dd903402d6328216dc373a8ed3f1b71ff2" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="0967815dcab7f3eac1ea5b301eaafacc97bdc39f147567b85ad9a17b59ed689c" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="8f43490c9ad4665c8cc2294eb5b34e8fe96ea824d719b76d1d5b35a843d96048" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="64b6ed4862476aed587618af7313a616a42badaeea660f7e15249f9785975ce0" name="bind-sdb-chroot" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="89a8e1776679ca05381e19f6c169805816ac8ff930a69fa347b430acb1732cdb" name="bind-sdb-chroot" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="6717fcf9daf60736f4d1784214a27f26b75a59dbe831785a79a93f2e00397c25" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="beffc4896211c07fdd5b3d66ddde90156f5b9a73309ce185bff3731820acdf90" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="ec678298d2af4f492d740629f606f5c0c75485d16cdc9eb1b6750e21f3c9ec92" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="1d8d57fda5f374f4ce8f9d4d144f51ba0dd4eb319604a9803e3901027f8e3979" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="c076835ed7b3f754e61d9d1a3f97588eff5f9e6a99cbc0332f70092ff56b709b" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="35f0e04e83d34c079dc107d29370d94fed7ee9d9221414155e4f3a2ba4e85313" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="b9661563ebe671733a3514c74a5948d22cf7357f9547e0b90c2291dae87ed77f" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="ed6adf0e1b0248cd24781335553d90ed6fdb1951ea9e90cc522ddd555bdd816f" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="78483feea6145744b89d017f7792b6af3b526d6db9a31a1a086de0745c4af8da" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="4ebfa81785356be515b744c1f4fb3107fe3b056a14f5e6d272a70c67829a8268" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="4253c4ee151f04fd376e25e25770654a5feffab8dde96b53493c67c096d91c08" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="c3d3b2b6b2f738150ee29baea771429c86ac2d0fad87305f25a37e5a3f0114b3" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="657bdf13eee8476349991a0237e80600d8cd894ad4f3ea3cced2b2f674973fdc" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="99bdaf323c3a4655a91b06b7402535fa6f931995ee3148a4eeeec508ab9b180a" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="d1319fde2b8933bf3f6d1744eccf7f96cb2b5859a625991ab07cbe0809eaf861" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="694320d60a11de0d14166075cd587f5ff71c5c0fb7082f75b858f0534b4e9389" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="1f737b02e8e05895ecd711b75567b771dd1d9f76bf8584839c7842fe1916af33" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="8c8e47c6df18c6571917b29e38aa2b49bf0047ad7af07768ae8915af8e410a4e" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="2ef7a720ce296de99702062482b948f593691aff540f10ea0e1e44be3892373f" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="530995de29e176d08a8e734ff036bd513485625be8e2846decb52d5124ed9fce" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="b8533c0139bd1ccff840f13c8314cd1e98dd27a9b91470c4dca3ae1958edd95f" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="c9b499560610bab67e0e258858248444ddf7228076827755c2c6f70af42ff083" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="9174b2ec1da2f7d18932f0757a07b30ce5f79f4c8fa7074abfd5cd24560a69c9" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="9974f5d7a8758a2b504c99204ece300fb403ee140e1026564f2ae90b208cca5b" name="bind-utils" arch="x86_64">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="f53d558aaad57b020adbfd894560adf0a326ec4aa0dbcd7bf411baed2a2440e0" name="binutils" arch="i686">
  <version epoch="0" ver="2.27" rel="44.base.el7_9.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base" date="1568116800">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-44.base" date="1581595200">- Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
- Implement assembler workaround for Intel JCC microcode bug.  (#1778892)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.27-44.base.1" date="1634904000">- Add ability to control the display of unicode characters.  (#2009168)</changelog>
</package>
<package pkgid="97e0c1b95903df901c8b16d58f369cb26ff1d8207caca51b2c512079358751f0" name="binutils" arch="src">
  <version epoch="0" ver="2.27" rel="44.base.el7_9.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base" date="1568116800">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-44.base" date="1581595200">- Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
- Implement assembler workaround for Intel JCC microcode bug.  (#1778892)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.27-44.base.1" date="1634904000">- Add ability to control the display of unicode characters.  (#2009168)</changelog>
</package>
<package pkgid="9b87dacecb23f05e2d660d5f63d8e6a0dbbd4d96f87262404702122c8eb99d0c" name="binutils" arch="src">
  <version epoch="0" ver="2.27" rel="44.base.el7_9.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base" date="1568116800">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-44.base" date="1581595200">- Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
- Implement assembler workaround for Intel JCC microcode bug.  (#1778892)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.27-44.base.1" date="1634904000">- Add ability to control the display of unicode characters.  (#2009168)</changelog>
</package>
<package pkgid="696cb96a1bbc6993110c1ce691f7714345882fc1fb6ef620606f3d57979bf876" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.27" rel="44.base.el7_9.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base" date="1568116800">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-44.base" date="1581595200">- Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
- Implement assembler workaround for Intel JCC microcode bug.  (#1778892)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.27-44.base.1" date="1634904000">- Add ability to control the display of unicode characters.  (#2009168)</changelog>
</package>
<package pkgid="ff19a93e55993569a4609b1d5de757cf5b384f6a98a57d18e46dd03b7450b53e" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.27" rel="44.base.el7_9.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base" date="1568116800">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-44.base" date="1581595200">- Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
- Implement assembler workaround for Intel JCC microcode bug.  (#1778892)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.27-44.base.1" date="1634904000">- Add ability to control the display of unicode characters.  (#2009168)</changelog>
</package>
<package pkgid="0dab23c115fc5f726af26402cd8bfee949c0bc64144fc2ae55ef046f345ed4db" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.27" rel="44.base.el7_9.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base" date="1568116800">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-44.base" date="1581595200">- Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
- Implement assembler workaround for Intel JCC microcode bug.  (#1778892)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.27-44.base.1" date="1634904000">- Add ability to control the display of unicode characters.  (#2009168)</changelog>
</package>
<package pkgid="6e873d6141587a0d729f1aa30721ef70d805b7d3b25e8d9628272afb8fa1d2c8" name="binutils-devel" arch="i686">
  <version epoch="0" ver="2.27" rel="44.base.el7_9.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base" date="1568116800">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-44.base" date="1581595200">- Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
- Implement assembler workaround for Intel JCC microcode bug.  (#1778892)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.27-44.base.1" date="1634904000">- Add ability to control the display of unicode characters.  (#2009168)</changelog>
</package>
<package pkgid="5a305615a617c98e8424b5b7724cb8c772043125b73afe7cb6c4977ec943c03e" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.27" rel="44.base.el7_9.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base" date="1568116800">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-44.base" date="1581595200">- Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
- Implement assembler workaround for Intel JCC microcode bug.  (#1778892)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.27-44.base.1" date="1634904000">- Add ability to control the display of unicode characters.  (#2009168)</changelog>
</package>
<package pkgid="73a0e243d5e2adf6454e9121137ea6e0253b946e41d27933c537e74ccf4350b4" name="bmc-snmp-proxy" arch="noarch">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="060085344b2430d0c7b73c2d0c42fde72a44c048a045144a7c753d96146a79b7" name="bmc-snmp-proxy" arch="noarch">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="292b3fec0945af9da918a0280e47c2498ede83013c09ad8ec46c49f0a6ad2a9c" name="bmc-snmp-proxy" arch="noarch">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="10fee51a273478dc2b32d9de7512bc46621c7f6938c80058d59fe5baf0636dcd" name="bmc-snmp-proxy" arch="noarch">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="13983f8de2607c5911efd95b97167d1f8bb59dc41ca09cce4a25884b650b7e42" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="e098948a181384c878f729b2f45b0458fea0e39a06c4ab446c1e03ed055b7aa6" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="c9c9c1daec21d17c69132e1039aade61ddfd7e63eb33b55ffba76bc8606fce3c" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="1cbcef2806d9d7073ff34a5d5474ab9bcb57c3cf854d432eee6d561502d6c3c5" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="25128a22b1beaaffaf796673e1a7bfe0e23d68e8240aad7638bbb41799c281ee" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="b8f39b3a63a9397964ae40727872e1de442f65071e94f30d5174bbaf8037fc57" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="7cad66ff867b942168e059c6638ce286496706576f24bf1812a0d7a08853d09b" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="7efd26811b961eb287dfb39a37cc2579e9ce81fdcf7e2fd4fed7d4d095d622d5" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="e010a1d78e09f2a21fcbd05c4d732f5d0ac6d1bfe312016c25447a6bc8c17015" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="1f3e42879b0910140fc71121878a75835773c22aa04418ee0f105da94c3affb9" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="fe89b5f44a1f3c509f215a26ea33fc7df8404b8d13f1f65a6ba8a077f81ca024" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="5e84101aaa34c56d6d9286b9e1c5f5e8c25eeef2c26d3db6fdae3f39278a564c" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="a446bbceca93152ab9cb9f8979242a64809054c665a9cf19cda81005badb56b1" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="246a3d436003baff13524dc30bfba32c2e3bf6947b263f721b1f42a39afe2ba9" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="1540b3a8c867759facc35f02eebff8e52cc00a271f27d7466dafd26f9258a139" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="23ab410d0450296fb83599e547d28de8038a9ac2fb5399f12f836cbb51b7a40c" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="c718ef2e58bce661fe611a132639acb61651f41ddbf63ded0d19ae32cf9aa20a" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="ae45f10d8af931149852c1de35121758f8913784920667c41b95b663ce590cd8" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="e82d350a171484d07c8ca583488239740961c804274fe10931580806bdf0f434" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="e70259b14d2fe0029c3b19426dc8104b5a9393e415c6cb827746ee94b3b78f03" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="06c282587b7135cbe9a233cfdc6c98b151541d6cc7f077f893a97bf134006b1e" name="bpftool" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="7a0320f413c1dcff89a1004deb201f25a47fb45d7c3265e597c7424bd8a281d9" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="67948223b46fc27be4eb0f2db8be72ef0a806e601fe99330fe2bf0fed1421cd8" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="e8daffa9b2b36a54e187d7310dd548f1a58c7eafc1b5ec2873e823ee5be4aa97" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="30d4e64a6925f2da6e26d184292f73afe74c9c36ba8f18314072531ce77b7d65" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="ef65ebc413981047949c6b62573aea91fd2f05f399c1eb9066708bf1d84ba826" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="7f606935cccb3f696195d23572f93dfb0b8e051f760e77e3e958df1639003d97" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="5b73d3cea79d6271fe742427ae25334959f5a5f9fe2da2969118cd11df2f7828" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="c4b89e8cc38db91c740b6d9db87f15e5219ab18756685aabf6710faec7e5b7d9" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="0a42a7afb398296d9afb532709ccbfe94a849902f2822f85150632ae1d1f3da6" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="b65bd9452e97b799169b6e923f46370b72c496604ec1a9338ad7b3e03aeb55dd" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="bee9804cf5d77ddc875c7e15ff77a23bd712b97cc00f3dc42f4516ec78d2700d" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="d0fd555b1272f7ff04df110747e3c0a0744e18034c55951cc1a8cec3b0779e01" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="448e65b95b2f9101a5df3c54b4b3f68565bcde0915b826a23802af9d40caf2c7" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="ac72d840f713de228830b2f90639e58b271de1de5a0e9efb3742c5c99475ad22" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="07557ba1d3a7211fc63b97b1adb33e693424e8a2eaacaa6f2272281c309a76ca" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="430324f218eb5d4399ffc11592085fdf896086e89cf720da8396b7cb38247768" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="32ab69e080e7d3e88dbc3747728301756b7a53431a02f2251587dfdf6e1fb4d8" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="5bd86ce94af8531485526db2c0d34b418687b55d1006fd8b70bcb158b3fc27c2" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="83b53e2ce5dce8a1049f6378ec90133424bd66b3a10f90a99e02dd2e4407a982" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="babedcc432cf5851f84700a3d1498ab727f1a6048f2817b6efde0fa791e9e16e" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="f7f6cb6b7ac356ba71fb36d82b07b4b9451ef48ad719e5ef836c12fe835a54b6" name="bpftool-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="2ce8a291894286c9ce38815c4ed159b4b4bcc34268b285be14367868051281d1" name="brasero" arch="i686">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="12d18776684f8c605e22f61dbb1284aa874b11f52f7cb7bc95c1639dad2d0293" name="brasero" arch="src">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="32a331cfaa4be2aeecf1c31e6f422efeca2442952f673c81dfbb1e0a22eb2e00" name="brasero" arch="src">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="dbf124110d13f27d00499d64e79859cf88cfa81cc4b6310884a8535068d6c227" name="brasero" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="5ea240eab27344ab863b3a142a6ac11a02f957d753ae924ffe4ed57c7e6bbd5c" name="brasero-debuginfo" arch="i686">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="af962a9ae8619fc7bbe702f052fc6b5a7b60ca8d718ffc7997644bc9c682e33a" name="brasero-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="321cddff9918ea80e754930ed99ec30b66c1df480e9d3b984b0bd32e0dbaa4de" name="brasero-devel" arch="i686">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="f6304d528a05d1aac695e4ca365fac7baf3b34978fa127247bba88c085120d0b" name="brasero-devel" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="84011d8c038675879466247913e9a8f83a233bcbcc04e8536ca42f536c448cbd" name="brasero-libs" arch="i686">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="e285bbc37425a70d68fe66149fd11c67f2ce9022be77d57968147845ef358725" name="brasero-libs" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="65f1a839ddafaea0e20bea9074327b3d852cf21c5d9ad4504d2d5dcf511cae3e" name="brasero-nautilus" arch="i686">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="8e71c9a453c8255619585deccfa6df53dd504330bfb18f076334f0e782299329" name="brasero-nautilus" arch="x86_64">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="df39f66a6b23b14d34fde06b9edece16ef8f85a2e04d7269e161cd540b0eea39" name="c-ares" arch="i686">
  <version epoch="0" ver="1.10.0" rel="3.el7_9.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.9.1-1" date="1340625600">- update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-2" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-3" date="1344427200">- Include URL to the license text</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-5" date="1365681600">- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
  allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-6" date="1365681601">- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.10.1-1" date="1368446400">- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
  are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.10.0-3.1" date="1686830400">- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]</changelog>
</package>
<package pkgid="7cd967a815ff55c6b31ee31dac84c6190d77595212f104d7a23b747b71bc0322" name="c-ares" arch="src">
  <version epoch="0" ver="1.10.0" rel="3.el7_9.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.9.1-1" date="1340625600">- update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-2" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-3" date="1344427200">- Include URL to the license text</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-5" date="1365681600">- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
  allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-6" date="1365681601">- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.10.1-1" date="1368446400">- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
  are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.10.0-3.1" date="1686830400">- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]</changelog>
</package>
<package pkgid="4cdc26023a97c6e97924a27748401e10b277730f5c67af3f883fb5fbdb8dfb75" name="c-ares" arch="src">
  <version epoch="0" ver="1.10.0" rel="3.el7_9.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.9.1-1" date="1340625600">- update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-2" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-3" date="1344427200">- Include URL to the license text</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-5" date="1365681600">- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
  allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-6" date="1365681601">- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.10.1-1" date="1368446400">- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
  are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.10.0-3.1" date="1686830400">- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]</changelog>
</package>
<package pkgid="404e485dc916e9c48cf34a01431c09e97552553001580b8f829140c203e196d9" name="c-ares" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="3.el7_9.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.9.1-1" date="1340625600">- update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-2" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-3" date="1344427200">- Include URL to the license text</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-5" date="1365681600">- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
  allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-6" date="1365681601">- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.10.1-1" date="1368446400">- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
  are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.10.0-3.1" date="1686830400">- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]</changelog>
</package>
<package pkgid="d78cb71cd361c239a65253188b6ee7eb5e54ac77f58cd668256a5ca8e5cbe7d2" name="c-ares-debuginfo" arch="i686">
  <version epoch="0" ver="1.10.0" rel="3.el7_9.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.9.1-1" date="1340625600">- update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-2" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-3" date="1344427200">- Include URL to the license text</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-5" date="1365681600">- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
  allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-6" date="1365681601">- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.10.1-1" date="1368446400">- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
  are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.10.0-3.1" date="1686830400">- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]</changelog>
</package>
<package pkgid="575a48997ecd50caa092d0fb81ac88c5fe23204d6221dcd7db93d7890fd25be2" name="c-ares-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="3.el7_9.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.9.1-1" date="1340625600">- update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-2" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-3" date="1344427200">- Include URL to the license text</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-5" date="1365681600">- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
  allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-6" date="1365681601">- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.10.1-1" date="1368446400">- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
  are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.10.0-3.1" date="1686830400">- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]</changelog>
</package>
<package pkgid="05229bec4bd7ed86ba1f0244077643456cbee0bf4eabba10e9c7079f80184cb9" name="c-ares-devel" arch="i686">
  <version epoch="0" ver="1.10.0" rel="3.el7_9.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.9.1-1" date="1340625600">- update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-2" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-3" date="1344427200">- Include URL to the license text</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-5" date="1365681600">- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
  allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-6" date="1365681601">- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.10.1-1" date="1368446400">- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
  are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.10.0-3.1" date="1686830400">- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]</changelog>
</package>
<package pkgid="2e732f1403ab03dffdf0144f06368d385151674efb09fc186ae4f5284cf6ce4b" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="3.el7_9.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.9.1-1" date="1340625600">- update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-2" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-3" date="1344427200">- Include URL to the license text</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-5" date="1365681600">- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
  allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-6" date="1365681601">- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.10.1-1" date="1368446400">- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
  are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.10.0-3.1" date="1686830400">- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]</changelog>
</package>
<package pkgid="cd8a79b7c34fda281ea20994f602436facc7fc2997795a078f1f9fd5ea5e80a6" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2021.2.50" rel="72.el7_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
</package>
<package pkgid="dda006f07fb7da3e4464082f9726669b90eebec091d5e30fcd8a5385123ca38f" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2021.2.50" rel="72.el7_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
</package>
<package pkgid="fd7b79de7f8e3c3989cef29e6ca72a6f2f339bdd18fd0f43f3857cee10b3c72a" name="ca-certificates" arch="src">
  <version epoch="0" ver="2021.2.50" rel="72.el7_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
</package>
<package pkgid="68438763e96afa8c4ccd8195455b207c9a42091b0bb6b440064c91c221f6ad9a" name="ca-certificates" arch="src">
  <version epoch="0" ver="2021.2.50" rel="72.el7_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
</package>
<package pkgid="a93457445a7e8278e762082181b9d618adaf29d6b4904ac34572b25eaa539257" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2022.2.54" rel="74.el7_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-71" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-72" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-73" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-74" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
</package>
<package pkgid="9c4680d97422b4b21a9e09e0bce5dfee26c97dd396f33ba03a1408061f44e353" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2022.2.54" rel="74.el7_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-71" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-72" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-73" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-74" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
</package>
<package pkgid="08733c961f59958f488d058c868e77166660d8f493b6f2c94456ce833e0edbd9" name="ca-certificates" arch="src">
  <version epoch="0" ver="2022.2.54" rel="74.el7_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-71" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-72" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-73" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-74" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
</package>
<package pkgid="569626d284d7d4b0ee348e9e693ac1ed0b302613300aeb886b4b8dce45ef1327" name="ca-certificates" arch="src">
  <version epoch="0" ver="2022.2.54" rel="74.el7_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-71" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-72" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-73" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-74" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
</package>
<package pkgid="f59c482401b1ac7bfe11b38a59dfdf0e26b3e7673bd706f726e82c550f7079af" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2023.2.60_v7.0.306" rel="72.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-71" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-72" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-73" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-74" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 2023.2.60_v7.0.306-71" date="1690891200">- Update to CKBI 2.60_v7.0.306 from NSS 3.91
-    Removing:
-     # Certificate "Camerfirma Global Chambersign Root"
-     # Certificate "Staat der Nederlanden EV Root CA"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "CCA India 2007"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 3"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-    Adding:
-     # Certificate "DigiCert TLS ECC P384 Root G5"
-     # Certificate "DigiCert TLS RSA4096 Root G5"
-     # Certificate "DigiCert SMIME ECC P384 Root G5"
-     # Certificate "DigiCert SMIME RSA4096 Root G5"
-     # Certificate "Certainly Root R1"
-     # Certificate "Certainly Root E1"
-     # Certificate "E-Tugra Global Root CA RSA v3"
-     # Certificate "E-Tugra Global Root CA ECC v3"
-     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
-     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
-     # Certificate "BJCA Global Root CA1"
-     # Certificate "BJCA Global Root CA2"
-     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
-     # Certificate "A-Trust-Root-05"
-     # Certificate "ADOCA02"
-     # Certificate "StartCom Certification Authority G2"
-     # Certificate "ATHEX Root CA"
-     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "America Online Root Certification Authority 1"
-     # Certificate "Juur-SK"
-     # Certificate "ComSign CA"
-     # Certificate "ComSign Secured CA"
-     # Certificate "ComSign Advanced Security CA"
-     # Certificate "Global Chambersign Root"
-     # Certificate "Sonera Class2 CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "VeriSign, Inc."
-     # Certificate "GTE CyberTrust Global Root"
-     # Certificate "Equifax Secure Global eBusiness CA-1"
-     # Certificate "Equifax"
-     # Certificate "Class 1 Primary CA"
-     # Certificate "Swiss Government Root CA III"
-     # Certificate "Application CA G4 Root"
-     # Certificate "SSC GDL CA Root A"
-     # Certificate "GlobalSign Code Signing Root E45"
-     # Certificate "GlobalSign Code Signing Root R45"
-     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 2023.2.60_v7.0.306-72" date="1694001600">- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.</changelog>
</package>
<package pkgid="7f995cba2138dde27862d268995afd0196876e7585295fd4787f1454ba0c216d" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2023.2.60_v7.0.306" rel="72.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-71" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-72" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-73" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-74" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 2023.2.60_v7.0.306-71" date="1690891200">- Update to CKBI 2.60_v7.0.306 from NSS 3.91
-    Removing:
-     # Certificate "Camerfirma Global Chambersign Root"
-     # Certificate "Staat der Nederlanden EV Root CA"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "CCA India 2007"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 3"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-    Adding:
-     # Certificate "DigiCert TLS ECC P384 Root G5"
-     # Certificate "DigiCert TLS RSA4096 Root G5"
-     # Certificate "DigiCert SMIME ECC P384 Root G5"
-     # Certificate "DigiCert SMIME RSA4096 Root G5"
-     # Certificate "Certainly Root R1"
-     # Certificate "Certainly Root E1"
-     # Certificate "E-Tugra Global Root CA RSA v3"
-     # Certificate "E-Tugra Global Root CA ECC v3"
-     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
-     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
-     # Certificate "BJCA Global Root CA1"
-     # Certificate "BJCA Global Root CA2"
-     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
-     # Certificate "A-Trust-Root-05"
-     # Certificate "ADOCA02"
-     # Certificate "StartCom Certification Authority G2"
-     # Certificate "ATHEX Root CA"
-     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "America Online Root Certification Authority 1"
-     # Certificate "Juur-SK"
-     # Certificate "ComSign CA"
-     # Certificate "ComSign Secured CA"
-     # Certificate "ComSign Advanced Security CA"
-     # Certificate "Global Chambersign Root"
-     # Certificate "Sonera Class2 CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "VeriSign, Inc."
-     # Certificate "GTE CyberTrust Global Root"
-     # Certificate "Equifax Secure Global eBusiness CA-1"
-     # Certificate "Equifax"
-     # Certificate "Class 1 Primary CA"
-     # Certificate "Swiss Government Root CA III"
-     # Certificate "Application CA G4 Root"
-     # Certificate "SSC GDL CA Root A"
-     # Certificate "GlobalSign Code Signing Root E45"
-     # Certificate "GlobalSign Code Signing Root R45"
-     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 2023.2.60_v7.0.306-72" date="1694001600">- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.</changelog>
</package>
<package pkgid="3e1e53688f4e54ff967ca1d390db22b864623f285cc2af30903e13fce8fba582" name="ca-certificates" arch="src">
  <version epoch="0" ver="2023.2.60_v7.0.306" rel="72.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-71" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-72" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-73" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-74" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 2023.2.60_v7.0.306-71" date="1690891200">- Update to CKBI 2.60_v7.0.306 from NSS 3.91
-    Removing:
-     # Certificate "Camerfirma Global Chambersign Root"
-     # Certificate "Staat der Nederlanden EV Root CA"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "CCA India 2007"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 3"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-    Adding:
-     # Certificate "DigiCert TLS ECC P384 Root G5"
-     # Certificate "DigiCert TLS RSA4096 Root G5"
-     # Certificate "DigiCert SMIME ECC P384 Root G5"
-     # Certificate "DigiCert SMIME RSA4096 Root G5"
-     # Certificate "Certainly Root R1"
-     # Certificate "Certainly Root E1"
-     # Certificate "E-Tugra Global Root CA RSA v3"
-     # Certificate "E-Tugra Global Root CA ECC v3"
-     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
-     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
-     # Certificate "BJCA Global Root CA1"
-     # Certificate "BJCA Global Root CA2"
-     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
-     # Certificate "A-Trust-Root-05"
-     # Certificate "ADOCA02"
-     # Certificate "StartCom Certification Authority G2"
-     # Certificate "ATHEX Root CA"
-     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "America Online Root Certification Authority 1"
-     # Certificate "Juur-SK"
-     # Certificate "ComSign CA"
-     # Certificate "ComSign Secured CA"
-     # Certificate "ComSign Advanced Security CA"
-     # Certificate "Global Chambersign Root"
-     # Certificate "Sonera Class2 CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "VeriSign, Inc."
-     # Certificate "GTE CyberTrust Global Root"
-     # Certificate "Equifax Secure Global eBusiness CA-1"
-     # Certificate "Equifax"
-     # Certificate "Class 1 Primary CA"
-     # Certificate "Swiss Government Root CA III"
-     # Certificate "Application CA G4 Root"
-     # Certificate "SSC GDL CA Root A"
-     # Certificate "GlobalSign Code Signing Root E45"
-     # Certificate "GlobalSign Code Signing Root R45"
-     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 2023.2.60_v7.0.306-72" date="1694001600">- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.</changelog>
</package>
<package pkgid="3128113dce8a9e362518df478621938e40b37adb905f0e934dea849532a8f281" name="ca-certificates" arch="src">
  <version epoch="0" ver="2023.2.60_v7.0.306" rel="72.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-71" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-72" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-73" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-74" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 2023.2.60_v7.0.306-71" date="1690891200">- Update to CKBI 2.60_v7.0.306 from NSS 3.91
-    Removing:
-     # Certificate "Camerfirma Global Chambersign Root"
-     # Certificate "Staat der Nederlanden EV Root CA"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "CCA India 2007"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 3"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-    Adding:
-     # Certificate "DigiCert TLS ECC P384 Root G5"
-     # Certificate "DigiCert TLS RSA4096 Root G5"
-     # Certificate "DigiCert SMIME ECC P384 Root G5"
-     # Certificate "DigiCert SMIME RSA4096 Root G5"
-     # Certificate "Certainly Root R1"
-     # Certificate "Certainly Root E1"
-     # Certificate "E-Tugra Global Root CA RSA v3"
-     # Certificate "E-Tugra Global Root CA ECC v3"
-     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
-     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
-     # Certificate "BJCA Global Root CA1"
-     # Certificate "BJCA Global Root CA2"
-     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
-     # Certificate "A-Trust-Root-05"
-     # Certificate "ADOCA02"
-     # Certificate "StartCom Certification Authority G2"
-     # Certificate "ATHEX Root CA"
-     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "America Online Root Certification Authority 1"
-     # Certificate "Juur-SK"
-     # Certificate "ComSign CA"
-     # Certificate "ComSign Secured CA"
-     # Certificate "ComSign Advanced Security CA"
-     # Certificate "Global Chambersign Root"
-     # Certificate "Sonera Class2 CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "VeriSign, Inc."
-     # Certificate "GTE CyberTrust Global Root"
-     # Certificate "Equifax Secure Global eBusiness CA-1"
-     # Certificate "Equifax"
-     # Certificate "Class 1 Primary CA"
-     # Certificate "Swiss Government Root CA III"
-     # Certificate "Application CA G4 Root"
-     # Certificate "SSC GDL CA Root A"
-     # Certificate "GlobalSign Code Signing Root E45"
-     # Certificate "GlobalSign Code Signing Root R45"
-     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 2023.2.60_v7.0.306-72" date="1694001600">- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.</changelog>
</package>
<package pkgid="a190111a8eaf93854be5b314dca695bd866d0ecda2c801059faa67910eea942f" name="centos-release" arch="i686">
  <version epoch="0" ver="7" rel="9.2009.1.el7.centos"/>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
  <changelog author="Anssi Johansson &lt;avij@centosproject.org&gt;" date="1538395200">- Point AltArch URLs to mirrorlist.c.o instead of mirror.c.o</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1542974400">- Update to 7.6
- Fix vault repos</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1567425600">- Own yum vars
- Generate yum vars at build time
- Remove dist_suffix
- Fix autorelabel preset
- Fix tuned profile in system-release-cpe
- Set aarch64 tuned profile to server
- Update to 7.7</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1586174400">- Add rootfs-expand to aarch64
- Create generic kvariant in aarch64 if it doesn't exist (for new kernel repos)
- Own kvariant var in armhfp and aarch64
- Backport move of /etc/os-release to /usr/lib/os-release (ngompa)
- Spec file cleanup (carlwgeorge)
- Update to 7.8</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1602331200">- Update to 7.9</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1606132800">- Fix reference to 7.8 upstream</changelog>
</package>
<package pkgid="a815133bb64d35e126368873bbbf20acd6f56090b5b4efa4d301c72ac15889a7" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="9.2009.1.el7.centos"/>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
  <changelog author="Anssi Johansson &lt;avij@centosproject.org&gt;" date="1538395200">- Point AltArch URLs to mirrorlist.c.o instead of mirror.c.o</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1542974400">- Update to 7.6
- Fix vault repos</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1567425600">- Own yum vars
- Generate yum vars at build time
- Remove dist_suffix
- Fix autorelabel preset
- Fix tuned profile in system-release-cpe
- Set aarch64 tuned profile to server
- Update to 7.7</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1586174400">- Add rootfs-expand to aarch64
- Create generic kvariant in aarch64 if it doesn't exist (for new kernel repos)
- Own kvariant var in armhfp and aarch64
- Backport move of /etc/os-release to /usr/lib/os-release (ngompa)
- Spec file cleanup (carlwgeorge)
- Update to 7.8</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1602331200">- Update to 7.9</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1606132800">- Fix reference to 7.8 upstream</changelog>
</package>
<package pkgid="c50ebd216566bcbce5f5adee5c7b83bf3b5d3011f0f43fb3dbbfa9003a57d7a0" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="9.2009.1.el7.centos"/>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
  <changelog author="Anssi Johansson &lt;avij@centosproject.org&gt;" date="1538395200">- Point AltArch URLs to mirrorlist.c.o instead of mirror.c.o</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1542974400">- Update to 7.6
- Fix vault repos</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1567425600">- Own yum vars
- Generate yum vars at build time
- Remove dist_suffix
- Fix autorelabel preset
- Fix tuned profile in system-release-cpe
- Set aarch64 tuned profile to server
- Update to 7.7</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1586174400">- Add rootfs-expand to aarch64
- Create generic kvariant in aarch64 if it doesn't exist (for new kernel repos)
- Own kvariant var in armhfp and aarch64
- Backport move of /etc/os-release to /usr/lib/os-release (ngompa)
- Spec file cleanup (carlwgeorge)
- Update to 7.8</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1602331200">- Update to 7.9</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1606132800">- Fix reference to 7.8 upstream</changelog>
</package>
<package pkgid="85c32f53f70967fdda68582c0b5c4075d20e6e22d2094d9134e541989309b11a" name="centos-release" arch="x86_64">
  <version epoch="0" ver="7" rel="9.2009.1.el7.centos"/>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
  <changelog author="Anssi Johansson &lt;avij@centosproject.org&gt;" date="1538395200">- Point AltArch URLs to mirrorlist.c.o instead of mirror.c.o</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1542974400">- Update to 7.6
- Fix vault repos</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1567425600">- Own yum vars
- Generate yum vars at build time
- Remove dist_suffix
- Fix autorelabel preset
- Fix tuned profile in system-release-cpe
- Set aarch64 tuned profile to server
- Update to 7.7</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1586174400">- Add rootfs-expand to aarch64
- Create generic kvariant in aarch64 if it doesn't exist (for new kernel repos)
- Own kvariant var in armhfp and aarch64
- Backport move of /etc/os-release to /usr/lib/os-release (ngompa)
- Spec file cleanup (carlwgeorge)
- Update to 7.8</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1602331200">- Update to 7.9</changelog>
  <changelog author="Pablo Greco &lt;pgreco@centosproject.org&gt;" date="1606132800">- Fix reference to 7.8 upstream</changelog>
</package>
<package pkgid="904e70d1f285f1588741ad0eb82b5c6480d4d9f25d63228b5550e2e2145cb658" name="certmonger" arch="i686">
  <version epoch="0" ver="0.78.4" rel="15.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-6" date="1527595200">- Remove reference to unused patch</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
</package>
<package pkgid="46328234acc2acc074be88a1bd5d213d31db6cb2fdc03d26e03d9dd9c527e72e" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="15.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-6" date="1527595200">- Remove reference to unused patch</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
</package>
<package pkgid="4a4b5150352c40b11f7273018f44cc4b61c21ae6dd7eba4721ae69f77aeaf1bd" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="15.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-6" date="1527595200">- Remove reference to unused patch</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
</package>
<package pkgid="6b933935269f8a2320a32ba56c9aeed106808b0daccf8ab634378303a02d2fad" name="certmonger" arch="x86_64">
  <version epoch="0" ver="0.78.4" rel="15.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-6" date="1527595200">- Remove reference to unused patch</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
</package>
<package pkgid="eb4d575e151f9a3b969e4654512074436b04ab1195400d2be59ddae8206f368e" name="certmonger" arch="i686">
  <version epoch="0" ver="0.78.4" rel="16.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
</package>
<package pkgid="7b93c29b2aef18124649d679795459b0065424a20fc0be54f9f0864fc1109392" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="16.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
</package>
<package pkgid="eb8bc703fb62926e8f190fbfb5a5fc7e7745ec8b022b6686cf11b80f92eaf999" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="16.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
</package>
<package pkgid="aad7cb0018d9ed526dbc141c60830fe2a163a344a83dc155072ad2ea5fc0dacf" name="certmonger" arch="x86_64">
  <version epoch="0" ver="0.78.4" rel="16.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
</package>
<package pkgid="5c752dc50050780b5303da6ff6ce56e18969244a1ca30077e3e25cd7537af16f" name="certmonger" arch="i686">
  <version epoch="0" ver="0.78.4" rel="17.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828800">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-17" date="1634644800">- certmonger creates CSRs with invalid DER syntax for X509v3 extensions
  with critical=FALSE (#2015511)</changelog>
</package>
<package pkgid="b679f39e7b83c949ec513dfa33619d7cafe51f68d4f856eac73b25a43dd50394" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="17.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828800">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-17" date="1634644800">- certmonger creates CSRs with invalid DER syntax for X509v3 extensions
  with critical=FALSE (#2015511)</changelog>
</package>
<package pkgid="0b7e3f9943af17ebcfaf92a1614f583f8b88ca18476d43eea1f3031240e521b2" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="17.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828800">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-17" date="1634644800">- certmonger creates CSRs with invalid DER syntax for X509v3 extensions
  with critical=FALSE (#2015511)</changelog>
</package>
<package pkgid="0f4daa89f1de9784c7ca811f83ff61755885052b8dcc74dd39b981c2632b29c4" name="certmonger" arch="x86_64">
  <version epoch="0" ver="0.78.4" rel="17.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828800">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-17" date="1634644800">- certmonger creates CSRs with invalid DER syntax for X509v3 extensions
  with critical=FALSE (#2015511)</changelog>
</package>
<package pkgid="aaf07899303406c6f37aa366ec35811a2f8f4a1fd3660982f92d85e5dab5225e" name="certmonger-debuginfo" arch="i686">
  <version epoch="0" ver="0.78.4" rel="15.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-6" date="1527595200">- Remove reference to unused patch</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
</package>
<package pkgid="7db3e458d8a6c1daeac6b8927311463aa028df1487827d2577426fc66fae68b6" name="certmonger-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.78.4" rel="15.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-6" date="1527595200">- Remove reference to unused patch</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
</package>
<package pkgid="71de9741212c6cf535778bb7e4a7b42972bce337d65285c2c057718745aad517" name="certmonger-debuginfo" arch="i686">
  <version epoch="0" ver="0.78.4" rel="16.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
</package>
<package pkgid="3a8f453421147f3d2d44d7e3045542ffa0aef2af27fd79fc1029c27edac7bc17" name="certmonger-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.78.4" rel="16.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
</package>
<package pkgid="0f9fd904d358fd5d55fd54e892067b1223f9c181a083e1e086899b429a98ee5e" name="certmonger-debuginfo" arch="i686">
  <version epoch="0" ver="0.78.4" rel="17.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828800">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-17" date="1634644800">- certmonger creates CSRs with invalid DER syntax for X509v3 extensions
  with critical=FALSE (#2015511)</changelog>
</package>
<package pkgid="b57ca79a4339b405d5e63b8b66761459edeb6325b8e0244815913efd76ad494b" name="certmonger-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.78.4" rel="17.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828800">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-17" date="1634644800">- certmonger creates CSRs with invalid DER syntax for X509v3 extensions
  with critical=FALSE (#2015511)</changelog>
</package>
<package pkgid="6b7339a0c32af8e569bd967bea95e5e8940794ee4ce7bb0bbe9db3102a5c4e92" name="cloud-init" arch="i686">
  <version epoch="0" ver="19.4" rel="7.el7.centos.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.5-5.el7" date="1568116800">- ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010]
- Resolves: bz#1593010
  ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.5-6.el7" date="1571918400">- ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526]
- Resolves: bz#1744526
  ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-1.el7" date="1584446400">- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
  ([RHEL-7.9] cloud-init rebase to 19.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
</package>
<package pkgid="2eacd57a848a076c9900b049b0f30b4e3db77bb4fcb24e2366965da5898aa17d" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7.centos.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.5-5.el7" date="1568116800">- ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010]
- Resolves: bz#1593010
  ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.5-6.el7" date="1571918400">- ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526]
- Resolves: bz#1744526
  ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-1.el7" date="1584446400">- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
  ([RHEL-7.9] cloud-init rebase to 19.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
</package>
<package pkgid="991e30c3283657095ff104c5cff8e374239b76a0fba86d399b1c1c0d3bbeb002" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7.centos.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.5-5.el7" date="1568116800">- ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010]
- Resolves: bz#1593010
  ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.5-6.el7" date="1571918400">- ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526]
- Resolves: bz#1744526
  ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-1.el7" date="1584446400">- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
  ([RHEL-7.9] cloud-init rebase to 19.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
</package>
<package pkgid="ce9ef897300161a27de8a28f15853780c0a394650b27ca7f73e4b46fa70f4058" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.4" rel="7.el7.centos.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.5-5.el7" date="1568116800">- ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010]
- Resolves: bz#1593010
  ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.5-6.el7" date="1571918400">- ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526]
- Resolves: bz#1744526
  ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-1.el7" date="1584446400">- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
  ([RHEL-7.9] cloud-init rebase to 19.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
</package>
<package pkgid="6532cd6d08028fcbf77dd6e09aed0b32967497fddf2b2a9a149304b3c4fe34be" name="cloud-init" arch="i686">
  <version epoch="0" ver="19.4" rel="7.el7.centos.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-1.el7" date="1584446400">- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
  ([RHEL-7.9] cloud-init rebase to 19.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
</package>
<package pkgid="a33309dac294d6592a0d16e8e03ecb3544ea6b8b0f9e434007f9b18cd6da65a6" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7.centos.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-1.el7" date="1584446400">- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
  ([RHEL-7.9] cloud-init rebase to 19.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
</package>
<package pkgid="3005a3abbe6ca4a0a91134bf717ef6b55aa6675e018e64e64c2d4a81410426b5" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7.centos.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-1.el7" date="1584446400">- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
  ([RHEL-7.9] cloud-init rebase to 19.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
</package>
<package pkgid="81edc362c79579daf3dbbe90fd9173fd98356f3dd59667765fde3b11230642cb" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.4" rel="7.el7.centos.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-1.el7" date="1584446400">- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
  ([RHEL-7.9] cloud-init rebase to 19.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
</package>
<package pkgid="45a87b30d20ea596efe0153d4a1ea1a08f07e8472ea5f9b1db39e19a73247e26" name="cloud-init" arch="i686">
  <version epoch="0" ver="19.4" rel="7.el7.centos.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
</package>
<package pkgid="bb98dd76f6825c91973429e5a4cb0a37f7d89b105b48357692c8f4c24d9b40bc" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7.centos.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
</package>
<package pkgid="92aa6598837bb873b50b1db4d9cfd7c1d030917ebf2121772e0d8c402159c6f0" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7.centos.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
</package>
<package pkgid="f16ff2f43250070437bf2621f8c81333c4c9c52291d5ca6c1aae47b0cefedd9b" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.4" rel="7.el7.centos.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
</package>
<package pkgid="431cb34052db57b7d39e73ccdac87be6e7c16b42053eb756ea49bdea5626dcb6" name="cloud-init" arch="i686">
  <version epoch="0" ver="19.4" rel="7.el7.centos.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7_9.5" date="1624968000">- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
  ([rhel-7]cloud-final.service fails if NetworkManager not installed.)</changelog>
</package>
<package pkgid="81bac5dee59ddfee567198e6ecc2f0f2ba27a7cc29a7687f8b634b12809f1bda" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7.centos.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7_9.5" date="1624968000">- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
  ([rhel-7]cloud-final.service fails if NetworkManager not installed.)</changelog>
</package>
<package pkgid="8abc1c057e1d4aec961431c745ad410ced0506133fe113d575f8f90929cdc647" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7.centos.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7_9.5" date="1624968000">- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
  ([rhel-7]cloud-final.service fails if NetworkManager not installed.)</changelog>
</package>
<package pkgid="3d0b3ebd858dd1e0dd4d5ec94a8af1a86d61fa21d523840da622827d6224052e" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.4" rel="7.el7.centos.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7_9.5" date="1624968000">- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
  ([rhel-7]cloud-final.service fails if NetworkManager not installed.)</changelog>
</package>
<package pkgid="d3902373e7480da4cd5e01fd8a0863d2ae0fc5ca6381ad91b12300228c32a0ef" name="cloud-init" arch="i686">
  <version epoch="0" ver="19.4" rel="7.el7.centos.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7_9.5" date="1624968000">- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
  ([rhel-7]cloud-final.service fails if NetworkManager not installed.)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.6" date="1643025600">- ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231]
- Resolves: bz#2003231
  (anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)</changelog>
</package>
<package pkgid="4ba861892407a221061412bde625d06de10ecd78a61fdf08572f57a25c714c7f" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7.centos.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7_9.5" date="1624968000">- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
  ([rhel-7]cloud-final.service fails if NetworkManager not installed.)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.6" date="1643025600">- ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231]
- Resolves: bz#2003231
  (anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)</changelog>
</package>
<package pkgid="afec96e5c1db1670dcddf0a904a4b073b1e1abd36640c54fe51a99fdb92745f0" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7.centos.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7_9.5" date="1624968000">- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
  ([rhel-7]cloud-final.service fails if NetworkManager not installed.)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.6" date="1643025600">- ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231]
- Resolves: bz#2003231
  (anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)</changelog>
</package>
<package pkgid="4890dd7111335cc4a6b51dff800bd5c2bcf0891ccd6163d12a0fac3a8b0cab95" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="19.4" rel="7.el7.centos.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7_9.5" date="1624968000">- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
  ([rhel-7]cloud-final.service fails if NetworkManager not installed.)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.6" date="1643025600">- ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231]
- Resolves: bz#2003231
  (anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)</changelog>
</package>
<package pkgid="e3ee100a16ddf6f640e26c218f997fb61cd22c181028b0722d495b642fa6cb56" name="cmirror" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="496ae4ced051ad4d9796cb3bc61bc63cadcd07daf3262a005ba5cc46f0f827d7" name="cmirror" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="47cc3d1f15e7b7135cc7e5b9531cf9cc4dd90c49ee10bdbb680afeced82f2361" name="cmirror" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="223c216408a1a7fe5f711f45328c3f449d03a1160a3a5ac97900369260e5d5a8" name="cmirror" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="fd0b28353c0b56f1780b17a85c8adeadf25247bc633ae9e6c96359992b1439d7" name="cmirror" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="fc50469310984acb8b3fc79ed76aa6354990a47dd59a310d7430cd50b9864937" name="cmirror" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="079bc41f9d8dbd00c9e07c13bb8cf6ef5db6ccd48fbd797b484ff891bb984e78" name="compat-unixODBC234" arch="i686">
  <version epoch="0" ver="2.3.4" rel="2.el7_9"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-7" date="1386331200">- Renamed README.fedora to README.dist</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-10" date="1393329600">- Added missing man pages
  Resolves: rhbz#948935</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-11" date="1436961600">- Turn on versioning of cursor library.
  Resolves: rhbz#1194065</changelog>
  <changelog author="Tomas Repik &lt;trepik@redhat.com&gt; - 2.3.1-12" date="1476878400">- fix the libtool-ltdl compatibility
  Resolves: rhbz#1267438</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.1-13" date="1478260800">- revert: ltdl bundling</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.1-14" date="1555416000">- fixed insecure buffer copy (#1571530)
- fixed possible buffer overflow (#1571528)</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-1" date="1581336000">- rebase to version 2.3.4
  Resolves: #1790655
- SONAME version bumped to 1002</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-2" date="1581336001">- move soname back to *.so.2 (#1875355)
- add *.so.1002 symlinks for backward compatibility (#1844443)</changelog>
</package>
<package pkgid="cb18f8fa00ae437103b837b18a6a0af7c4dcd1554855bb5f3bdf68fce043c88f" name="compat-unixODBC234" arch="src">
  <version epoch="0" ver="2.3.4" rel="2.el7_9"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-7" date="1386331200">- Renamed README.fedora to README.dist</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-10" date="1393329600">- Added missing man pages
  Resolves: rhbz#948935</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-11" date="1436961600">- Turn on versioning of cursor library.
  Resolves: rhbz#1194065</changelog>
  <changelog author="Tomas Repik &lt;trepik@redhat.com&gt; - 2.3.1-12" date="1476878400">- fix the libtool-ltdl compatibility
  Resolves: rhbz#1267438</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.1-13" date="1478260800">- revert: ltdl bundling</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.1-14" date="1555416000">- fixed insecure buffer copy (#1571530)
- fixed possible buffer overflow (#1571528)</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-1" date="1581336000">- rebase to version 2.3.4
  Resolves: #1790655
- SONAME version bumped to 1002</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-2" date="1581336001">- move soname back to *.so.2 (#1875355)
- add *.so.1002 symlinks for backward compatibility (#1844443)</changelog>
</package>
<package pkgid="3e5b421cdcc0274724bdcafb9ec7856536aa535954e0aa5a116565e0eaef7d01" name="compat-unixODBC234" arch="src">
  <version epoch="0" ver="2.3.4" rel="2.el7_9"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-7" date="1386331200">- Renamed README.fedora to README.dist</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-10" date="1393329600">- Added missing man pages
  Resolves: rhbz#948935</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-11" date="1436961600">- Turn on versioning of cursor library.
  Resolves: rhbz#1194065</changelog>
  <changelog author="Tomas Repik &lt;trepik@redhat.com&gt; - 2.3.1-12" date="1476878400">- fix the libtool-ltdl compatibility
  Resolves: rhbz#1267438</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.1-13" date="1478260800">- revert: ltdl bundling</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.1-14" date="1555416000">- fixed insecure buffer copy (#1571530)
- fixed possible buffer overflow (#1571528)</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-1" date="1581336000">- rebase to version 2.3.4
  Resolves: #1790655
- SONAME version bumped to 1002</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-2" date="1581336001">- move soname back to *.so.2 (#1875355)
- add *.so.1002 symlinks for backward compatibility (#1844443)</changelog>
</package>
<package pkgid="8d7872cce1be290df7a82bd2d023956b948617b9ef3fc125fcaf7b66a3a81bce" name="compat-unixODBC234" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="2.el7_9"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-7" date="1386331200">- Renamed README.fedora to README.dist</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-10" date="1393329600">- Added missing man pages
  Resolves: rhbz#948935</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-11" date="1436961600">- Turn on versioning of cursor library.
  Resolves: rhbz#1194065</changelog>
  <changelog author="Tomas Repik &lt;trepik@redhat.com&gt; - 2.3.1-12" date="1476878400">- fix the libtool-ltdl compatibility
  Resolves: rhbz#1267438</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.1-13" date="1478260800">- revert: ltdl bundling</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.1-14" date="1555416000">- fixed insecure buffer copy (#1571530)
- fixed possible buffer overflow (#1571528)</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-1" date="1581336000">- rebase to version 2.3.4
  Resolves: #1790655
- SONAME version bumped to 1002</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-2" date="1581336001">- move soname back to *.so.2 (#1875355)
- add *.so.1002 symlinks for backward compatibility (#1844443)</changelog>
</package>
<package pkgid="d59739232d5af67bffacb4f83afd99d34c505bfd5bdcf533faa08310a4d22428" name="compat-unixODBC234-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.4" rel="2.el7_9"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-7" date="1386331200">- Renamed README.fedora to README.dist</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-10" date="1393329600">- Added missing man pages
  Resolves: rhbz#948935</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-11" date="1436961600">- Turn on versioning of cursor library.
  Resolves: rhbz#1194065</changelog>
  <changelog author="Tomas Repik &lt;trepik@redhat.com&gt; - 2.3.1-12" date="1476878400">- fix the libtool-ltdl compatibility
  Resolves: rhbz#1267438</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.1-13" date="1478260800">- revert: ltdl bundling</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.1-14" date="1555416000">- fixed insecure buffer copy (#1571530)
- fixed possible buffer overflow (#1571528)</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-1" date="1581336000">- rebase to version 2.3.4
  Resolves: #1790655
- SONAME version bumped to 1002</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-2" date="1581336001">- move soname back to *.so.2 (#1875355)
- add *.so.1002 symlinks for backward compatibility (#1844443)</changelog>
</package>
<package pkgid="3cf2977eb4b4588747912765889086494f7c8810e716e7e977ca3b71778fad70" name="compat-unixODBC234-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="2.el7_9"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-7" date="1386331200">- Renamed README.fedora to README.dist</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-10" date="1393329600">- Added missing man pages
  Resolves: rhbz#948935</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-11" date="1436961600">- Turn on versioning of cursor library.
  Resolves: rhbz#1194065</changelog>
  <changelog author="Tomas Repik &lt;trepik@redhat.com&gt; - 2.3.1-12" date="1476878400">- fix the libtool-ltdl compatibility
  Resolves: rhbz#1267438</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.1-13" date="1478260800">- revert: ltdl bundling</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.1-14" date="1555416000">- fixed insecure buffer copy (#1571530)
- fixed possible buffer overflow (#1571528)</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-1" date="1581336000">- rebase to version 2.3.4
  Resolves: #1790655
- SONAME version bumped to 1002</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-2" date="1581336001">- move soname back to *.so.2 (#1875355)
- add *.so.1002 symlinks for backward compatibility (#1844443)</changelog>
</package>
<package pkgid="75941928f92d4ea3dfdc8a9a030fccf43aa8e5c06e1e4a601bab14aed9291e9e" name="compat-unixODBC234-devel" arch="i686">
  <version epoch="0" ver="2.3.4" rel="2.el7_9"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-7" date="1386331200">- Renamed README.fedora to README.dist</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-10" date="1393329600">- Added missing man pages
  Resolves: rhbz#948935</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-11" date="1436961600">- Turn on versioning of cursor library.
  Resolves: rhbz#1194065</changelog>
  <changelog author="Tomas Repik &lt;trepik@redhat.com&gt; - 2.3.1-12" date="1476878400">- fix the libtool-ltdl compatibility
  Resolves: rhbz#1267438</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.1-13" date="1478260800">- revert: ltdl bundling</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.1-14" date="1555416000">- fixed insecure buffer copy (#1571530)
- fixed possible buffer overflow (#1571528)</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-1" date="1581336000">- rebase to version 2.3.4
  Resolves: #1790655
- SONAME version bumped to 1002</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-2" date="1581336001">- move soname back to *.so.2 (#1875355)
- add *.so.1002 symlinks for backward compatibility (#1844443)</changelog>
</package>
<package pkgid="73b23a66acf96a9a82cd95c853a7da5beafe7ff9a4758dd90f48922e9a086d61" name="compat-unixODBC234-devel" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="2.el7_9"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-7" date="1386331200">- Renamed README.fedora to README.dist</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-10" date="1393329600">- Added missing man pages
  Resolves: rhbz#948935</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-11" date="1436961600">- Turn on versioning of cursor library.
  Resolves: rhbz#1194065</changelog>
  <changelog author="Tomas Repik &lt;trepik@redhat.com&gt; - 2.3.1-12" date="1476878400">- fix the libtool-ltdl compatibility
  Resolves: rhbz#1267438</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.1-13" date="1478260800">- revert: ltdl bundling</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.1-14" date="1555416000">- fixed insecure buffer copy (#1571530)
- fixed possible buffer overflow (#1571528)</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-1" date="1581336000">- rebase to version 2.3.4
  Resolves: #1790655
- SONAME version bumped to 1002</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-2" date="1581336001">- move soname back to *.so.2 (#1875355)
- add *.so.1002 symlinks for backward compatibility (#1844443)</changelog>
</package>
<package pkgid="d142a18fb7f69c9face0090dcc07ade0898f97f9276cf2cf478001d2746b9b01" name="control-center" arch="i686">
  <version epoch="1" ver="3.28.1" rel="8.el7_9.1"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.1-8.1" date="1655899200">- Remove timezone boundaries
  Resolves: #2098262</changelog>
</package>
<package pkgid="78703a3e5fc1f5b0953a44d48e78578a402087852e3c58287e397a906a050be3" name="control-center" arch="src">
  <version epoch="1" ver="3.28.1" rel="8.el7_9.1"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.1-8.1" date="1655899200">- Remove timezone boundaries
  Resolves: #2098262</changelog>
</package>
<package pkgid="0c5d1e67d34d7ef130d071cd94ea749e4664b7fac2a50e35a24bf20d9db89b5d" name="control-center" arch="src">
  <version epoch="1" ver="3.28.1" rel="8.el7_9.1"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.1-8.1" date="1655899200">- Remove timezone boundaries
  Resolves: #2098262</changelog>
</package>
<package pkgid="beab4990c153f85721463ac4d3087847eda78ddfcb18e891dab6520694ef49c2" name="control-center" arch="x86_64">
  <version epoch="1" ver="3.28.1" rel="8.el7_9.1"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.1-8.1" date="1655899200">- Remove timezone boundaries
  Resolves: #2098262</changelog>
</package>
<package pkgid="f4bd9535b87b727b93bfa31f294f53829608bdead9e367ca028a493366a14df7" name="control-center" arch="i686">
  <version epoch="1" ver="3.28.1" rel="8.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128000">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
</package>
<package pkgid="07e976d879ac68058e8666aa196f4649c4183d7e687159a1eb6bbcefd4437108" name="control-center" arch="src">
  <version epoch="1" ver="3.28.1" rel="8.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128000">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
</package>
<package pkgid="49469db638c6c51a3e8b0434e5578d6e9c0d82d85dbfec584f23ff0ed9c74454" name="control-center" arch="src">
  <version epoch="1" ver="3.28.1" rel="8.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128000">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
</package>
<package pkgid="78cf73c181c3612b660b6c62721aa0e1fd2b4cbf13bc301561ee7f0391dd066b" name="control-center" arch="x86_64">
  <version epoch="1" ver="3.28.1" rel="8.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128000">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
</package>
<package pkgid="d50a6d30223681faaa858c4ff0f9f68ed0af9ef7e921b4c5ec86595892d6e9b4" name="control-center-debuginfo" arch="i686">
  <version epoch="1" ver="3.28.1" rel="8.el7_9.1"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.1-8.1" date="1655899200">- Remove timezone boundaries
  Resolves: #2098262</changelog>
</package>
<package pkgid="2ea785341fa2f5fa7a7f1d8c0a2cfa551fdf11e65d8e668664e6920105b6df9e" name="control-center-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.28.1" rel="8.el7_9.1"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.1-8.1" date="1655899200">- Remove timezone boundaries
  Resolves: #2098262</changelog>
</package>
<package pkgid="f429ab751fdb406c1eba7d32c238d2e678196425482ce47440c448c5edcba76d" name="control-center-debuginfo" arch="i686">
  <version epoch="1" ver="3.28.1" rel="8.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128000">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
</package>
<package pkgid="d31b24107eb355cfed96f1be3b06402306f12f979a38bf34a0a0e0c581de9488" name="control-center-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.28.1" rel="8.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128000">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
</package>
<package pkgid="94f7a938e3fd0bd2807d4304a736b24b361bfc4d8d9b74a99b88f71116f65f9a" name="control-center-filesystem" arch="i686">
  <version epoch="1" ver="3.28.1" rel="8.el7_9.1"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.1-8.1" date="1655899200">- Remove timezone boundaries
  Resolves: #2098262</changelog>
</package>
<package pkgid="471fb06416280ea8cbfb53170fb0727e4d731bfa89384d9ef5382824a873b4f0" name="control-center-filesystem" arch="x86_64">
  <version epoch="1" ver="3.28.1" rel="8.el7_9.1"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.1-8.1" date="1655899200">- Remove timezone boundaries
  Resolves: #2098262</changelog>
</package>
<package pkgid="aecd686ea7f1ce8cae6abc6d15aca648a370d37c9b63c3cb510b3017c87f73b8" name="control-center-filesystem" arch="i686">
  <version epoch="1" ver="3.28.1" rel="8.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128000">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
</package>
<package pkgid="aee650527559eee1c5188d515472fdcc8130d5f99446e2ed003bd650d769307c" name="control-center-filesystem" arch="x86_64">
  <version epoch="1" ver="3.28.1" rel="8.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128000">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
</package>
<package pkgid="5fccb311b0e51fc74c984355bf04ae8813807f0286e6d26205e0c12ca1574922" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="3.3" rel="11.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1571854</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1571854</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-11" date="1538740800">- Fixing deletation ofemtpy dirs via rogue symlink
- Resolves: rhbz#2100617</changelog>
</package>
<package pkgid="9ed4c6e8863a28c8152ac1cc30ff9708683198ffe3789237458d273ac6a4af7d" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="3.3" rel="11.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1571854</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1571854</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-11" date="1538740800">- Fixing deletation ofemtpy dirs via rogue symlink
- Resolves: rhbz#2100617</changelog>
</package>
<package pkgid="88fbd8f80d6d9aba86ea1a94af03ba3dd92d35bad66658113db55243c0ebcdbc" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="3.3" rel="11.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1571854</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1571854</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-11" date="1538740800">- Fixing deletation ofemtpy dirs via rogue symlink
- Resolves: rhbz#2100617</changelog>
</package>
<package pkgid="606eff7db477a96c1902b8aa4553cd38b0c4beb265294132a9afd53bc01e8930" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="3.3" rel="11.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1571854</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1571854</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-11" date="1538740800">- Fixing deletation ofemtpy dirs via rogue symlink
- Resolves: rhbz#2100617</changelog>
</package>
<package pkgid="52f568caae5844b1b6c779cfb9837c5b66221cb3b5f3f6d72f248e6f63214ee4" name="coreutils" arch="i686">
  <version epoch="0" ver="8.22" rel="24.el7_9.2"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-16" date="1448452800">- cp: prevent potential sparse file corruption (#1284906)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-18" date="1467374400">- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
  (#1327881, #1280357) 
- disable id/setgid.sh test(missing chroot feature), fix 
  cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
  compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
  than first field (#1328360)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-19" date="1505995200">- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-20" date="1511438400">- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-21" date="1512388800">- timeout: revert the last fix for a possible race (#1439465)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-22" date="1516795200">- mv -n: do not overwrite the destination (#1526265)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-23" date="1529064000">- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24" date="1552651200">- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.1" date="1593432000">- sync: support syncing specified arguments (#1850682)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.2" date="1595332800">- sync: fix open fallback bug (#1850682)</changelog>
</package>
<package pkgid="f4fd056d5aa5d34bc2d7c65d73938a4b238b9443b816fb0a3aa9b36fced374d9" name="coreutils" arch="i686">
  <version epoch="0" ver="8.22" rel="24.el7_9.2"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-16" date="1448452800">- cp: prevent potential sparse file corruption (#1284906)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-18" date="1467374400">- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
  (#1327881, #1280357) 
- disable id/setgid.sh test(missing chroot feature), fix 
  cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
  compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
  than first field (#1328360)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-19" date="1505995200">- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-20" date="1511438400">- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-21" date="1512388800">- timeout: revert the last fix for a possible race (#1439465)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-22" date="1516795200">- mv -n: do not overwrite the destination (#1526265)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-23" date="1529064000">- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24" date="1552651200">- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.1" date="1593432000">- sync: support syncing specified arguments (#1850682)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.2" date="1595332800">- sync: fix open fallback bug (#1850682)</changelog>
</package>
<package pkgid="dba329625c9a94f46b21579cbb75dbe258f83557ad83c4f0ec12cf46ed324d73" name="coreutils" arch="src">
  <version epoch="0" ver="8.22" rel="24.el7_9.2"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-16" date="1448452800">- cp: prevent potential sparse file corruption (#1284906)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-18" date="1467374400">- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
  (#1327881, #1280357) 
- disable id/setgid.sh test(missing chroot feature), fix 
  cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
  compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
  than first field (#1328360)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-19" date="1505995200">- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-20" date="1511438400">- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-21" date="1512388800">- timeout: revert the last fix for a possible race (#1439465)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-22" date="1516795200">- mv -n: do not overwrite the destination (#1526265)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-23" date="1529064000">- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24" date="1552651200">- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.1" date="1593432000">- sync: support syncing specified arguments (#1850682)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.2" date="1595332800">- sync: fix open fallback bug (#1850682)</changelog>
</package>
<package pkgid="cd0a82aa5fc8cd680b05e52deb77217045b779f2ba6c8c31a5396511be06d082" name="coreutils" arch="src">
  <version epoch="0" ver="8.22" rel="24.el7_9.2"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-16" date="1448452800">- cp: prevent potential sparse file corruption (#1284906)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-18" date="1467374400">- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
  (#1327881, #1280357) 
- disable id/setgid.sh test(missing chroot feature), fix 
  cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
  compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
  than first field (#1328360)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-19" date="1505995200">- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-20" date="1511438400">- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-21" date="1512388800">- timeout: revert the last fix for a possible race (#1439465)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-22" date="1516795200">- mv -n: do not overwrite the destination (#1526265)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-23" date="1529064000">- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24" date="1552651200">- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.1" date="1593432000">- sync: support syncing specified arguments (#1850682)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.2" date="1595332800">- sync: fix open fallback bug (#1850682)</changelog>
</package>
<package pkgid="80beff97d1eb2c30da842e3ee07d983542933085afb42b6d60d15f126fbad950" name="coreutils" arch="src">
  <version epoch="0" ver="8.22" rel="24.el7_9.2"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-16" date="1448452800">- cp: prevent potential sparse file corruption (#1284906)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-18" date="1467374400">- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
  (#1327881, #1280357) 
- disable id/setgid.sh test(missing chroot feature), fix 
  cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
  compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
  than first field (#1328360)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-19" date="1505995200">- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-20" date="1511438400">- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-21" date="1512388800">- timeout: revert the last fix for a possible race (#1439465)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-22" date="1516795200">- mv -n: do not overwrite the destination (#1526265)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-23" date="1529064000">- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24" date="1552651200">- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.1" date="1593432000">- sync: support syncing specified arguments (#1850682)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.2" date="1595332800">- sync: fix open fallback bug (#1850682)</changelog>
</package>
<package pkgid="54a04f2f84a938258589fe0c07e7e88739ae7f3b1ee5b479d6957eaf03540af1" name="coreutils" arch="x86_64">
  <version epoch="0" ver="8.22" rel="24.el7_9.2"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-16" date="1448452800">- cp: prevent potential sparse file corruption (#1284906)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-18" date="1467374400">- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
  (#1327881, #1280357) 
- disable id/setgid.sh test(missing chroot feature), fix 
  cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
  compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
  than first field (#1328360)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-19" date="1505995200">- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-20" date="1511438400">- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-21" date="1512388800">- timeout: revert the last fix for a possible race (#1439465)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-22" date="1516795200">- mv -n: do not overwrite the destination (#1526265)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-23" date="1529064000">- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24" date="1552651200">- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.1" date="1593432000">- sync: support syncing specified arguments (#1850682)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.2" date="1595332800">- sync: fix open fallback bug (#1850682)</changelog>
</package>
<package pkgid="fca06787e123fac58cf41cde0927038e3bcf897d8a54f626d24d14293f5e6f90" name="coreutils-debuginfo" arch="i686">
  <version epoch="0" ver="8.22" rel="24.el7_9.2"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-16" date="1448452800">- cp: prevent potential sparse file corruption (#1284906)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-18" date="1467374400">- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
  (#1327881, #1280357) 
- disable id/setgid.sh test(missing chroot feature), fix 
  cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
  compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
  than first field (#1328360)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-19" date="1505995200">- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-20" date="1511438400">- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-21" date="1512388800">- timeout: revert the last fix for a possible race (#1439465)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-22" date="1516795200">- mv -n: do not overwrite the destination (#1526265)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-23" date="1529064000">- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24" date="1552651200">- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.1" date="1593432000">- sync: support syncing specified arguments (#1850682)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.2" date="1595332800">- sync: fix open fallback bug (#1850682)</changelog>
</package>
<package pkgid="48f7213bf77ebf935146e9103c874ffd529cc76befef9767bf5d20c1a6e91b79" name="coreutils-debuginfo" arch="i686">
  <version epoch="0" ver="8.22" rel="24.el7_9.2"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-16" date="1448452800">- cp: prevent potential sparse file corruption (#1284906)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-18" date="1467374400">- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
  (#1327881, #1280357) 
- disable id/setgid.sh test(missing chroot feature), fix 
  cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
  compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
  than first field (#1328360)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-19" date="1505995200">- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-20" date="1511438400">- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-21" date="1512388800">- timeout: revert the last fix for a possible race (#1439465)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-22" date="1516795200">- mv -n: do not overwrite the destination (#1526265)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-23" date="1529064000">- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24" date="1552651200">- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.1" date="1593432000">- sync: support syncing specified arguments (#1850682)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.2" date="1595332800">- sync: fix open fallback bug (#1850682)</changelog>
</package>
<package pkgid="a59de7dc3485abd36f1ea02f834001aa8d8fc29cc1a05f84f5790d989b36bf93" name="coreutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.22" rel="24.el7_9.2"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-16" date="1448452800">- cp: prevent potential sparse file corruption (#1284906)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-18" date="1467374400">- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
  (#1327881, #1280357) 
- disable id/setgid.sh test(missing chroot feature), fix 
  cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
  compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
  than first field (#1328360)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-19" date="1505995200">- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-20" date="1511438400">- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-21" date="1512388800">- timeout: revert the last fix for a possible race (#1439465)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-22" date="1516795200">- mv -n: do not overwrite the destination (#1526265)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-23" date="1529064000">- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24" date="1552651200">- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.1" date="1593432000">- sync: support syncing specified arguments (#1850682)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.2" date="1595332800">- sync: fix open fallback bug (#1850682)</changelog>
</package>
<package pkgid="12b153c954d9912fd468c7695746c661e4cdcffb80e0dd4ed657e571ca4cb634" name="corosync" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="2614996afed9a594c9a65a97eb8208136309c7f0d024236c38dc3f662484eaee" name="corosync" arch="src">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="ff375e033d70100ac7e4fd75630454b4c34074208cb9253ee0e32e44aec4c9f8" name="corosync" arch="src">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="3d4da0c74af765f00851a4d45d2c7af434b69cddc92ec0ed5bcd682b252eb93c" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="dd4260639a1125816395667b0e68f8ac4d01f157a316b013ee41e3eb535d54f7" name="corosync" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="192464fdeb50565a5201f8725f9f4399b809f8f734a16343b4dfd63c2f79d730" name="corosync" arch="src">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="53058fce96fe120f67bafb5a57a3ca49ec0e820b3c53c4e7982910dbb6fcfaa8" name="corosync" arch="src">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="1352818f64f1f1b8982cd9f982057d41ac0fcc218f3085c9b11835489b87756a" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="ec19cfc44e5f280f18917a2e7031bebc71efc6623a2865d9a8a51a77e66fc2a9" name="corosync-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="7cced39735e83b15fe866192bb170567c0cd4de53103682bf224c6846524fc07" name="corosync-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="ed2639c9146ec31332ebe2ee4e02c76ba44f4269f0db6837a74c2738cc71b996" name="corosync-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="9325e6f76d4bd2d22c3b021366d0ad60fe5173423a1d11b4d074ee78caa29968" name="corosync-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="6f27a342fa6fe4970e75cb4943084622f587ad7868affc94972277a7d8b09b3d" name="corosync-qdevice" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="ee076aa46d0d397f7516bf79a72329b0b54a7dde3c3044cd3e44e893c053a417" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="c1d661bdc6d0e132be004d3f1d35d962a7b094ba5c237abc2bbe08abbcf185e3" name="corosync-qdevice" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="2590d3ef98aa0a31b497c95b7d7e520f125de4728dbcbe2fdf565cdc9bcd287c" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="c4fc16dd6e31255afd4a727abb5278aaf090fc8332d3445d4c93c8dbb794256d" name="corosync-qnetd" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="962583a6cb115acc94849999acdc5f37e641633d1d5a82bf45a51b63d17c6303" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="3b149a1c5b7cc0641ea789ca0d4515616dd5721cdc214429d4ffcd4bde7a251f" name="corosync-qnetd" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="ab705b76ad26cb2fd5ec8337a9c77be6a8cfc4a8ad5c9e37fd843b7cdb809ba7" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="fc5d222609fa625af845e31540ce215a3b9c8d14598e44d74d786e8f416e8fd2" name="corosynclib" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="1f16395b96a0b29856b0a09079e115ab74b4dd83a445c9b9b260b3d292fe96f8" name="corosynclib" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="ec2c05b970e1066a4fb0d893a891317b4ef075a016795a956afc10ac6168fc95" name="corosynclib" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="ce04f2425a203eff2fae9e207aeda36f0b86cd58709c3b763ffb0cc3bd246ae6" name="corosynclib" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="209829db46652ba09d43444fb068ba9c4934670f85fbc8840fac9adf22f9ae2b" name="corosynclib-devel" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="de7e66d42e8d385b16997ff806e2fd3d8246aeece0dc87ebb05e31a4f3cd192c" name="corosynclib-devel" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="4a6e625882f644863525a7edae27aaf6ba96459c71a6ac4f422658fabaddb3f5" name="corosynclib-devel" arch="i686">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="b20012efb8c303dc3dfe60191474539b79e535a5113c2ae330a1657a1952dde9" name="corosynclib-devel" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="3cb04077af0d47d247251e919b1774942ee59adf83161c4026e5807382b6189b" name="crash" arch="i686">
  <version epoch="0" ver="7.2.3" rel="11.el7_9.1"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-3" date="1527854400">- Rebase to github commits a6cd8408 to da49e201 
  Resolves: rhbz#1559460</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-4" date="1527854401">- Fix bpf.c covscan issues
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-5" date="1528718400">- Rebase to github commits b9d76838 to c79a11fa
  Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
  Resolves: rhbz#1589685</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-6" date="1530878400">- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-7" date="1536840000">- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-8" date="1537185600">- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-9" date="1546430400">- Alternate list loop detection option
  Resolves: rhbz#1595389
- Readline library tab completion plugin
  Resolves: rhbz#1656165</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-10" date="1546948800">- Restrict command line to 1500 bytes
  Resolves: rhbz#1663792</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-11" date="1554033600">- Fix to prevent display of invalid "timer" command entries
  Resolves: rhbz#1818084</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; - 7.2.3-11.1" date="1600862400">- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
  Resolves: rhbz#1854016</changelog>
</package>
<package pkgid="b26ee4e77d6dec27cd45cb58c63ed9b546dd46c90f74458f539d6a067cf89bc3" name="crash" arch="src">
  <version epoch="0" ver="7.2.3" rel="11.el7_9.1"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-3" date="1527854400">- Rebase to github commits a6cd8408 to da49e201 
  Resolves: rhbz#1559460</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-4" date="1527854401">- Fix bpf.c covscan issues
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-5" date="1528718400">- Rebase to github commits b9d76838 to c79a11fa
  Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
  Resolves: rhbz#1589685</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-6" date="1530878400">- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-7" date="1536840000">- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-8" date="1537185600">- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-9" date="1546430400">- Alternate list loop detection option
  Resolves: rhbz#1595389
- Readline library tab completion plugin
  Resolves: rhbz#1656165</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-10" date="1546948800">- Restrict command line to 1500 bytes
  Resolves: rhbz#1663792</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-11" date="1554033600">- Fix to prevent display of invalid "timer" command entries
  Resolves: rhbz#1818084</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; - 7.2.3-11.1" date="1600862400">- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
  Resolves: rhbz#1854016</changelog>
</package>
<package pkgid="966d8d0c65ad739834046088d7a3ee3cd734ee628413d88df13625aa7dcd54cc" name="crash" arch="src">
  <version epoch="0" ver="7.2.3" rel="11.el7_9.1"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-3" date="1527854400">- Rebase to github commits a6cd8408 to da49e201 
  Resolves: rhbz#1559460</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-4" date="1527854401">- Fix bpf.c covscan issues
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-5" date="1528718400">- Rebase to github commits b9d76838 to c79a11fa
  Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
  Resolves: rhbz#1589685</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-6" date="1530878400">- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-7" date="1536840000">- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-8" date="1537185600">- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-9" date="1546430400">- Alternate list loop detection option
  Resolves: rhbz#1595389
- Readline library tab completion plugin
  Resolves: rhbz#1656165</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-10" date="1546948800">- Restrict command line to 1500 bytes
  Resolves: rhbz#1663792</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-11" date="1554033600">- Fix to prevent display of invalid "timer" command entries
  Resolves: rhbz#1818084</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; - 7.2.3-11.1" date="1600862400">- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
  Resolves: rhbz#1854016</changelog>
</package>
<package pkgid="739fc9479fe34e27230ad57f27048018d0ceb222a9f547b40948942741834b98" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.3" rel="11.el7_9.1"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-3" date="1527854400">- Rebase to github commits a6cd8408 to da49e201 
  Resolves: rhbz#1559460</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-4" date="1527854401">- Fix bpf.c covscan issues
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-5" date="1528718400">- Rebase to github commits b9d76838 to c79a11fa
  Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
  Resolves: rhbz#1589685</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-6" date="1530878400">- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-7" date="1536840000">- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-8" date="1537185600">- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-9" date="1546430400">- Alternate list loop detection option
  Resolves: rhbz#1595389
- Readline library tab completion plugin
  Resolves: rhbz#1656165</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-10" date="1546948800">- Restrict command line to 1500 bytes
  Resolves: rhbz#1663792</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-11" date="1554033600">- Fix to prevent display of invalid "timer" command entries
  Resolves: rhbz#1818084</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; - 7.2.3-11.1" date="1600862400">- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
  Resolves: rhbz#1854016</changelog>
</package>
<package pkgid="5c88254873d5f74a169b16c5068fca64e76c22620ce0bbb609858f183db5da7a" name="crash-debuginfo" arch="i686">
  <version epoch="0" ver="7.2.3" rel="11.el7_9.1"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-3" date="1527854400">- Rebase to github commits a6cd8408 to da49e201 
  Resolves: rhbz#1559460</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-4" date="1527854401">- Fix bpf.c covscan issues
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-5" date="1528718400">- Rebase to github commits b9d76838 to c79a11fa
  Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
  Resolves: rhbz#1589685</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-6" date="1530878400">- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-7" date="1536840000">- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-8" date="1537185600">- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-9" date="1546430400">- Alternate list loop detection option
  Resolves: rhbz#1595389
- Readline library tab completion plugin
  Resolves: rhbz#1656165</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-10" date="1546948800">- Restrict command line to 1500 bytes
  Resolves: rhbz#1663792</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-11" date="1554033600">- Fix to prevent display of invalid "timer" command entries
  Resolves: rhbz#1818084</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; - 7.2.3-11.1" date="1600862400">- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
  Resolves: rhbz#1854016</changelog>
</package>
<package pkgid="909c0bcbb1dbf46903da31dd51d953edfc3fb873d9b6e70c9459f8fba03d4df6" name="crash-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.3" rel="11.el7_9.1"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-3" date="1527854400">- Rebase to github commits a6cd8408 to da49e201 
  Resolves: rhbz#1559460</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-4" date="1527854401">- Fix bpf.c covscan issues
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-5" date="1528718400">- Rebase to github commits b9d76838 to c79a11fa
  Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
  Resolves: rhbz#1589685</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-6" date="1530878400">- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-7" date="1536840000">- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-8" date="1537185600">- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-9" date="1546430400">- Alternate list loop detection option
  Resolves: rhbz#1595389
- Readline library tab completion plugin
  Resolves: rhbz#1656165</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-10" date="1546948800">- Restrict command line to 1500 bytes
  Resolves: rhbz#1663792</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-11" date="1554033600">- Fix to prevent display of invalid "timer" command entries
  Resolves: rhbz#1818084</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; - 7.2.3-11.1" date="1600862400">- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
  Resolves: rhbz#1854016</changelog>
</package>
<package pkgid="9547da0daa069a34637b10cb6137a54d8df261226aa279fb36d27db36604b966" name="crash-devel" arch="i686">
  <version epoch="0" ver="7.2.3" rel="11.el7_9.1"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-3" date="1527854400">- Rebase to github commits a6cd8408 to da49e201 
  Resolves: rhbz#1559460</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-4" date="1527854401">- Fix bpf.c covscan issues
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-5" date="1528718400">- Rebase to github commits b9d76838 to c79a11fa
  Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
  Resolves: rhbz#1589685</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-6" date="1530878400">- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-7" date="1536840000">- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-8" date="1537185600">- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-9" date="1546430400">- Alternate list loop detection option
  Resolves: rhbz#1595389
- Readline library tab completion plugin
  Resolves: rhbz#1656165</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-10" date="1546948800">- Restrict command line to 1500 bytes
  Resolves: rhbz#1663792</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-11" date="1554033600">- Fix to prevent display of invalid "timer" command entries
  Resolves: rhbz#1818084</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; - 7.2.3-11.1" date="1600862400">- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
  Resolves: rhbz#1854016</changelog>
</package>
<package pkgid="8669efbee4493501915f7a2851f02a9f2f34aa91b3111b66447dd4d4965c960e" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.3" rel="11.el7_9.1"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-3" date="1527854400">- Rebase to github commits a6cd8408 to da49e201 
  Resolves: rhbz#1559460</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-4" date="1527854401">- Fix bpf.c covscan issues
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-5" date="1528718400">- Rebase to github commits b9d76838 to c79a11fa
  Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
  Resolves: rhbz#1589685</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-6" date="1530878400">- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-7" date="1536840000">- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-8" date="1537185600">- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-9" date="1546430400">- Alternate list loop detection option
  Resolves: rhbz#1595389
- Readline library tab completion plugin
  Resolves: rhbz#1656165</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-10" date="1546948800">- Restrict command line to 1500 bytes
  Resolves: rhbz#1663792</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-11" date="1554033600">- Fix to prevent display of invalid "timer" command entries
  Resolves: rhbz#1818084</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; - 7.2.3-11.1" date="1600862400">- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
  Resolves: rhbz#1854016</changelog>
</package>
<package pkgid="0a1806d88b19f8c2fdb74ffb56b913115bfb3287d01340399180deb1d6a305c1" name="cronie" arch="i686">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="d7eb09b0a9dbff6d4609a9fba4f94cc5262243ea0182f8c7eca159275365942a" name="cronie" arch="i686">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="227959256071bbdd7e7b29d3105bec161a35aa625516fc22098548a2e9ff0757" name="cronie" arch="src">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="4d8ca1a2579e2a6b3396f65c1e5114c52b18deb0457f8181d16c9dd1d70aee8e" name="cronie" arch="src">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="43fb690bff2b82bed591ddca91a97d29ce987c3096f045981f19bf4e375533c1" name="cronie" arch="src">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="6a6edbb860a7fd757674e2e0396e6e21dbe5c65f9b589050b75f9dafbc24d274" name="cronie" arch="src">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="6f80b41bdf223fac78c381931614be3f5c4fe261423c65ba7da0875d8f145c4e" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="b1e15b1d89380bf2999d209df8d9b31414c093c0889f3a3f46f28da3e8c7d412" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="dfaaf0c5fc99364485c9b71702020567a671413dc1bab80519c47dd8ab4c3253" name="cronie" arch="i686">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="3489dc10f0cd2e6dad183651acd4526e785967b40708698aa2b3178d23f65c91" name="cronie" arch="src">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="9dc400743ababf9fcae5244c1f29d5c7fbb7ffd427cf3338896e90877be26642" name="cronie" arch="src">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="00ed296175e5678d5c3cd027c42f44f489ac9775e68a00497adcc0a1f84d3bbb" name="cronie" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="8ed68fb9c757647fd23de5f7f940e8f58d152bc211c9e77c561db781befe3099" name="cronie-anacron" arch="i686">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="017717066928f0bc3c5e5359d30310745e4100362c8d8e7ed2143b7c8329c912" name="cronie-anacron" arch="i686">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="a0f238f3b9ab7d69e34d7e266b23c61d419464a9daeeb7c530865e3cc70cf5d3" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="3b117d61037585501bd5bf8e24f13a01910eed807aa84761f97adbde390b793d" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="21fcb810d6d10b48f66df4a432a67a05fb0b93bea89d8527b239419b25927beb" name="cronie-anacron" arch="i686">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="6438bf60487389fedfe6ae91b2ebbbf30dbb43526544589b1df4b38a25202ece" name="cronie-anacron" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="3d694cc212bf4314b29ba2f653ede189023c18fc019bae475fba62f385145ae1" name="cronie-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="dbbfc19baa4fc04756a44fd4f8581d5ed400287b958f293ce218495cc84500a0" name="cronie-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="c3817729aa1199fd7e4db0a5a804c5c797eaa8085a10c5fc4540d0efc12c3c77" name="cronie-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="8e867216edf0d441c2bf9fec32f2d9dd40f7f8abb5f722c214cb907d4eae1b93" name="cronie-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="a7ccb8fee14d60f58faf224f32b6823a27237a58d63dac194d7438c1cb2bbe7b" name="cronie-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="e510fbdee338399b533d4b1aceb81c214a02cf2b4773a2387aacc36880f9d2d5" name="cronie-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="157e8dd3e532fb204d03362885e97ae1c918184f02ff3088581ecb9d1dd9e061" name="cronie-noanacron" arch="i686">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="3963a06428963191753cb6e9cddcf7c410e6644457377a3a20ced392c88e26d5" name="cronie-noanacron" arch="i686">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="ca1d33f41453934538ec572801da7a530575b2a0e6e271568a27a4989a839628" name="cronie-noanacron" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="ca28a095eea3da993b4d82b37bdd0bcdc64fd8d251679d2b34cae018dca4bce8" name="cronie-noanacron" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="538d2fba462187e503470378a90c1c9928dd82cac71e3bbc1a1a2cb11841b963" name="cronie-noanacron" arch="i686">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="8f3a56fa57640bce1a0e48ea06a2dbf569906d8cbfd9b3f9608fe77792ec02d8" name="cronie-noanacron" arch="x86_64">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="d7f65721e52a95092f0c18b53b4972e6174300c8b0a0af62d6aa731a9c8803f5" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="0a6d2d0556c9eb4742f274fca1d8adaf7cf72a4965abab4934a6a65b7c6d04dd" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="7de3fcffa95c2e7044612c1a5b5afa2990ea0780299c6fb98afa03fcd2d2e376" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="e3ea0aaa392d4479970380c023582b87aec96d84b941336476094b0390f6f99a" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="b25932b492de09fa661dc2e4c256bb92bfa9a3e4cc39fb1cc8cb95577f9dc83f" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="742a7c5ae86cdecbb1799373af3ecd166cadf2b23fc057d1f5bd3d5e61bbcbca" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="7d4430833cb241a08667be978b190a7802a851ef301d81f1651458568663f54e" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="dc05e60062c3cb8184ee1ee7e69dcef08668292bcae6245deb9e84ec30cbb080" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="f5798aa083dc009a2547dd82bcfffa4d5378b6760fce20ad26499080cdf6b193" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="1601dd23327338c46e254011509b2d4c1df24cddc8699ca8d05de6cb646a2702" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="fe41d7777007c60ded636224d42e26fe3827095de797f39b2bb0495a6517fc1d" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="d40453f8d87b79439f72dce523c6491b34c305b77f6fc892619748de75aea38e" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="e4c7793258b45dfbe376818b620183567449c5056476674f901619704f977e48" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="d74d01d74674d3ecf0f65cc5a2eba0de9319fae12250abc03b936ac6044bc0bb" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="80cd46ba53ee25070a58bcacc24bd4f7b623627e92c2f7cacd8c7e89a6a970c3" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="eb02a9f0806c7e9b5c3396b6ead9926aebddecc33a8674076a5f650619f8aec2" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="cf85a3d067f13888f31623f9cc058a13a6abde1f89f9e4fbab89e0e91fedb6d7" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="e48d4f79a3ae41ac9af435b6aec840d73738fd56be1f85f8c8f20aa2bc994bb7" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="6f50d1af6863db7d6bb9fbf0720689b7dc867690ea0ad281ea9971a73468ea29" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="7c86e3aa89e9f125d034ae58f31f77110456e478e880c7a1b70840df8e1cb638" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="f3d9098c0b4eba97924481b05120c32d7be0c77aefe4c414fb8a1e3f125b5412" name="ctdb" arch="i686">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="c2a2602c0bea9ae4d44187b33d4520331ab1eb0eb7367eeca7cdaa8ae86b70f4" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="902c351c051fcfabf02fd763080c4ff0e25e298bb8f018819d6fe9848b2ba2a4" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="b95deb3f2fb96da9bd92b663516fd19ecb4a660d116dfdcff10f7e1d30052193" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="bec96a4244f36a787017c9954bfbf9127d581d010141675cb8153d640c44941c" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="ccde65a202d9435dfb218aed6f3ce5a895834fd04dd68e9e98ef26e7a8b39e6a" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="2974a488a77ec5f747f939195f32e254ef09b535aa81acd891b1207d6bd3f1f6" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="ea8057a1ec9d23f1f5c9d9f68fbea6d6cad82b8ea555225da2ccb1e558767543" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="5bd6bcf1b2635f7e0be88833761201a3263e2f0b103b27af3eaf01e1058157e7" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="d36f273f27d9796aa1be35b867f4acba6d70d04ea42b58516c73e3b8c8604cd1" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="5916f301c6f1ae6970f00db9bf0be324bbe5b1fdf983c1600346c06acd3088ee" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="cd644e6734a51dbad7a8c44b13bcf8db5e240f8e69d83fb16742088276c3d0b7" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="785896205d58a836fb06e5aaa46f8521c6df3fc0c09a10caa3b7d8470f17a7e3" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="9dbd3cd4fd8565a400441c57c41c08eac182b5e645405bccdabd8a58126085a2" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="82e8c644d98f1224a5c1e9bd892f07bd26fcc0c8706f26cf12294771c1479ba9" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="04e8e8f5b9f7d33fbed5f0e9982fa0512533ed9d95d203b8c39348d70da638e2" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="8130d03669d7f899f1b347ce2d11f38e22e2c88ef0f420c834e4d55132df84c3" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="0c7e9a7a990cc783b6d3e694eee1641018b4fa0491626a1b722ca3df2c99cc83" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="7f3abea008bfbb99639dcd858066e11a7db11e41bdbcd25f538457c3a1a9d98e" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="2eef0f2b08ef8777ae77d2617fc970fba68413202f79e97b3e5ba817e87b0416" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="f12c2b5d8ff867ae6ffd54031a429d4a4191604fa6b3d7014606b9b0e576797d" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="a3fa6a4bd1f72e4f90eacfd4d3e273a2285dcad0e02be1513903821032abeecd" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="8c748df56337937761d94d492c881a1094616e56e2fbc1a9b06e6e818a5996b3" name="ctdb-tests" arch="i686">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="6f91e457e81c3a43b98a9867ed5bd28590b1c4b092927e90857708da9701566b" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="945f4f0cc83b2f1d7470adaa89742eed7645201b181182ff686defc1a1f407ed" name="cups" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="4cab608eec38a14fa26eb7b534b0e43837ef45cd806b8cafbd5df67622816f0c" name="cups" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="aa04fe27da50f02e9f2e27f56c2291a3a905c7691932cfb8da0fdfac3194799a" name="cups" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="eb661c1eccf21cd04881589918a965768da1b5f58fdea6abae8a32cad21cae45" name="cups" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="914b1b1188e23dd35ba127b04641183f6775f3099fc8cb9f80dd57286eca35b2" name="cups" arch="src">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="32306f40d6070b566e7b47582df76d5f9f441d5636c65740f8e3489cfad27d1d" name="cups" arch="src">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="9321d36950012549dfb4d13274542ab23489f0972d9276e889b781d028d31d9b" name="cups" arch="src">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="5e03b93fbe30ca2e68ef549439321880af177990086424b0f5321fb42fe1f9a0" name="cups" arch="src">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="7fa52e6751daabab15d4f449d6c488d870d1d1948b53ddd6dc51a842d7dc0fa7" name="cups" arch="src">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="28edfba84e30769b59601b7ec1e9f1db22a956ee002ce5ad5e6806f8de45dbcd" name="cups" arch="src">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="26dcaa90be1d0000d05d52e393911c9988cea3af7b617ab0e072a4198e56e456" name="cups" arch="src">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="45dd56e512a4d0f2a4ee8a6dfd29382f9c7013d40a3ece1923f286323f873ac9" name="cups" arch="src">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="f17c72f73f0c1e7d18518ced3783d6c94838685668b4961f85198186eaafacc8" name="cups" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="91a3515b70f2ba1b0413919fa738aea7e4d544aeba7b3e9516233ef25d1350f2" name="cups" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="f0dc7d18931181f5673b97b9081bb309b32deea337b8fb19b8e7cf4ad87e2d99" name="cups" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="5397406c7d64f6ac37a4e4588c23e2d13374acd6a40407aa02fdc3dd60f839e4" name="cups" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="6c6bac99b3bb7e2cf3318aef19a67845a13d01a84fa24b30a31abd321424866f" name="cups-client" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="c2031b1cc603359085f968675da911d9ac14e8bfd448314ef9725d6fdf8816c2" name="cups-client" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="4eaae92c8ecc91ac21af0b02927b33d76aac9fba2928a707b5a953b457ad1982" name="cups-client" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="80233cbebd1c671c56d0d1f4d624476d77055980c877916807f60447f145558a" name="cups-client" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="033b6f5e950c6dce083b9a52555e6510a6e6e50b8cc29ce48f0b6b4d27cf1175" name="cups-client" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="bfef8e7aafbbdf5ccb8d399deeb68f87ee17d3e9c03fd448c43242b5b6dfb909" name="cups-client" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="e0d76ca6fb45af1b7687cbb072379cc23fd2c1e43ba749a2de38b2be7dba16d5" name="cups-client" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="fa44789cdc1cab99d52bbf5a384a88a99bc0916efe9047544b3c4ba0ad3eb887" name="cups-client" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="9c714a7628df0bd2ae08597a2773296fcaa4428142d95b22a2d0cff016af624a" name="cups-debuginfo" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="217e16152dfc65ca4f2e65b6de73fd1591f19edffd87fdb85ae2c3b0f06e5904" name="cups-debuginfo" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="2017939c0cd27e3dc1f7ac915c95043675dfac8455a51c5ba5d5f1c423ad6247" name="cups-debuginfo" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="2fc897dc39c6d0e006733846b390001ef10ac1fb850a57a4e558d9a98efc30cb" name="cups-debuginfo" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="d5d24c596153a50e7825cad66bcc72c9beb2b9859eb606f6ffa7f62ebeacb13a" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="e3e8eb47be5294cf42e26fbf1661b1dacbeb234199a56eaa8bfb45fcf83139e8" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="af7019547bf082af14e30df5d2db26242b073eda17f0b5cc48fabf1d11e0dba8" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="50b0c4daf411583bc11baea6d79e9126c1a8fe191b80182e393454a08def35b6" name="cups-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="cd4d4691c523ca3be3fdf58b57bd2e0795a725b7b2cb7fa0f4f9cf593017e3b6" name="cups-devel" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="28a506e3fdf722efebbc0ce8baa2172f1b40934eb650235c7fe3c73567dddf2d" name="cups-devel" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="f0e1a6e3a207d7bc7890ac73a8cad17bb4add51143d1fd4a4279e3d8af0c2577" name="cups-devel" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="e9643db82885dfd1cb4b5761846cb81b2beb210f30c07645e9b94ef29bb60390" name="cups-devel" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="c0303dd9c6581e2d7333ea99d5c1e1c2c50825593680399150cc872eef672a45" name="cups-devel" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="162598062d6c84289a3d8863be093fe99bbd0fb7ea40d6e5159fb9a6a875d09f" name="cups-devel" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="67391ba1403ca0c778ff1c75d6ef689a9e1e385c0fa7f3de55b9d30ecb083075" name="cups-devel" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="855d5a2bc2598f989992911f74442416edb2a187f52fcffedd2b468c47add027" name="cups-devel" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="adc1804202a2afdff323cda226ec93b1624d81501398cbd95f349b69cbfcf104" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="656b45e761b1c74c4be82d687be0f7b8fc5e13cc7484acdaeb257bd600d8e78b" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="ae813e52493f9163b3df785e0e8633d469d15da4b77c44daf3ed102cf4bce9a6" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="fec0829b8d1cf5ff4ec3332c5439f5f911d1ca8b84646308659d53dc627e6149" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="d09d41bf110c14d0640b1d05a617e9736e4e3b26c23d2facf697c58afcaf9652" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="6eb60edc91bfcb46bf6da95fd703a4537fe3f3e80938477490ca09f0a4de9b93" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="19710a981ec89295b42bf6ecc5ac38dd0436131fc1400b926b0b876c144a2d71" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="0c6b3350343634a6c46069c77da41dd790cf26141b54fb0d97df1be7b6e19b07" name="cups-filesystem" arch="noarch">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="5992266e54d3311b2468fb9621821fb70e83f360f9885770c7da849649cf922a" name="cups-filters" arch="i686">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="faa6e1aa28ed2c821b8cda7c2ae5e37ed468fd39de42cda0ba1c472e866fd324" name="cups-filters" arch="src">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="d248e86f849f4900e9470898ce3552f5e4581baed8d83ef96ec869f9b7bfb978" name="cups-filters" arch="src">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="9ea352f771a58a0978c5662d40a4bf34dc0390310395c88e9fe9093415aa1076" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="3a24b6315967ac6371a94e739539931045e98c1fe7459aabf0aa6a6529758866" name="cups-filters-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="fe7f37dc164f55e505543ab93f521ad01ecd6b5356efacdb47053e5d1e82acd1" name="cups-filters-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="50c2d1537bb9f385ce154d69f5b687f8d26876aebbb78b39a88365008924adc1" name="cups-filters-devel" arch="i686">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="19dbb4f1cb4707ccf641f4a9b84180e70911ae2dc201906b57530e5270248cdc" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="239867035733e6f360d073344c5393dd16611dec2ddabe4ccc723e0097873f0f" name="cups-filters-libs" arch="i686">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="7c6a243210d63b8565a46c416460d479775b128e15a034fde246ef90adcc682c" name="cups-filters-libs" arch="x86_64">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="d6e7783a31009d98b76ff3394dbc242fe185f11c12105b51526a7dee8f12e0cd" name="cups-ipptool" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="1753efaeea299c9436b22b63f2230dfc0aa5e69b4d333ea241cf563294844e7f" name="cups-ipptool" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="8e6545e8b7b6bd502385058113db2cb03d087e591864c4e04be7af76aa6ef375" name="cups-ipptool" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="d7cdd5a4636c83c2f236ad4a618921e51c3fb9ded02b1ff8b91b8915a14afb11" name="cups-ipptool" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="7e62b14d18775b2c84ad761b9c9d5c9dba353fb9a3ecaf9951630c8c16c1c3f4" name="cups-ipptool" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="6d1c60d23d170399d65db15388422116a26d8096ca22442315ee016f6ab09649" name="cups-ipptool" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="3e2614cdbe5ebff8cbf29199e759ce290850010cb44003077e024735f90bf9cc" name="cups-ipptool" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="af8932d70bda86921654f4b4be06d69c8c2ebbc522333354a8c2b0018b0b1a68" name="cups-ipptool" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="31a30312b2ebf83160757bbcb489f1eed278548545e918e204472c7abed59286" name="cups-libs" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="a22ddb89b88373a4819d657e89cbef4e922d39946eedc0ec52aac7d82bfe971c" name="cups-libs" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="d4f4b683ba8fd1cbeda3a4a205c21098ceb14ccd8bb30068b232d9fa9385b763" name="cups-libs" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="63e98352d9af34afba4198938f45f33dd267003566b4cf73f9287791b2f53b9a" name="cups-libs" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="d15a8ace3d17974010df3c56ee46cad35ec019c695f0c6f5acfddc77a7f22b81" name="cups-libs" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="cf3b5686933e3d9f55324f6948f751aa7d8d965bb7b89ad0fdf65546ddcbb6a0" name="cups-libs" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="3b6f8179f01c33eff40c0b4a0a7675dde4f8532fa5650e40892c827935a055c3" name="cups-libs" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="1882bb3f8cb386249b7ed599f7463d46bf4644d6d389eb1f2483cfd291538b5c" name="cups-libs" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="366b64036bfb19ec20a3ddc8150d106307e10264ea7a330ff0fb9f0db5ed3c3a" name="cups-lpd" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="447157d940fc4830b84dc0dfe7cee6095753c6b727f309eb0cc162134431a9e5" name="cups-lpd" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="39e1f25d6aa2439b2ee39911a0415d5346d19055b475f786de1c8b6074438228" name="cups-lpd" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="b0d6fc87c32360ab6673834722d653c065ba34b83fb73be4221a7e1c7a00badf" name="cups-lpd" arch="i686">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="9b12b84a65943f9d77e8300c63e26f5c2aee0219bd02063284f58a8ff24c17aa" name="cups-lpd" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="ea48a0c7e6f825be8fbadb5368564bdf9085812f08fadff7470af274349e4e91" name="cups-lpd" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="c10f61bcabab7c6158093f7e4233c66c872bb06fe343a0258c600f7067d81a94" name="cups-lpd" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="d075ee30c5cf8726abab5d37825d936d02b04eec4ed97a0fd5425553824dd987" name="cups-lpd" arch="x86_64">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="bd47f74f5fd1e352b68424649b080a0cc366709547e74d6fa90202c15b489e72" name="curl" arch="i686">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="0a111c82661dd6c55410405dfe0cdbf0dc43de4b58713a9abac771d9eb334d83" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="28649dada1c91c00acaedb29898d18edbe15be879929ddbf9351135c2ca610c4" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="787bd51c22e06a58119df3e11f4be96ea3dbd72b3b8866804b48ac021b60ce39" name="curl" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="ace1c6cac2bca90acf7ca8c067c1980fd71943567a46adb6893e514358a8ab18" name="curl" arch="i686">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="691a9be9274f1319f2e51ca9446de674f85a70dfd447d29966878d4c81e6e66b" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="e5e60bcce934a0e60d022d82dd1a922eb11b5adfddc46421335280c41bb83a08" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="6687c8793080b32850c0ee6ad7443bc0eff3070b2548b95b8da15f055676bf39" name="curl" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="99db8a3fcab7fa92c6fa3400f8cfb8c5be617333c9096e41e945e4319681d540" name="curl-debuginfo" arch="i686">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="65d5e1a9ae40cf90f105d90071ff3648afed66675396d8343c779c31af2f03d1" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="acf7c106a0d16e7d146166570028ff75a9e38abe347dcd960fea2f59edc817a9" name="curl-debuginfo" arch="i686">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="e52861bf5863ee9bc66fd800155f063ab00d4ca10b3731adccbaa33d6d727ed6" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="50034d56a8236c26bcf95e1164671cbdd2cd0d33d52b5d8d80a4a5543d74e5ee" name="cyrus-sasl" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="3a415b6f3fc3b7501c63808ad655327625dd7d5a37ece0d6fe0b8e622a065070" name="cyrus-sasl" arch="src">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="de98f0ac3ef45f9960f051cb15db7da9fcd3f8c030d087d22b5b2f85acddbfa6" name="cyrus-sasl" arch="src">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="d3357ba83e7c2fb7224ee0d5ee296124167ce5db6c7b09fd68ae1377c3881672" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="e2bc6fae74ca972b7c28fb6f803139d88e3a4cc021c30964a9954b8c108ccd51" name="cyrus-sasl-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="41ab7c16c2217ccd53aaa1137fdcdc2a07e052aab77f9b260e37ef2829bb32d4" name="cyrus-sasl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="edd3c378bea9f342c6d77099dc585b6e421b060df14d9c5ecab33c3cc1f36c4e" name="cyrus-sasl-devel" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="76687f1b2723572ec450c6f2bc08984d7c27942bec28b983a85ae8f7ee4a515c" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="dfd4ee62464432aea1745ebdfc2b94ee90c87751cccfb0d56aa6a3040ad79a33" name="cyrus-sasl-gs2" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="8ae9b20abe98ae92e2b592700ee434e56b8f1c1b5282ec9bd64481fb964550f6" name="cyrus-sasl-gs2" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="860288173a88ca34de88eab6fd87d5ab8ec2aac9b8b7b8d6030424ef1c59b5c0" name="cyrus-sasl-gssapi" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="a8a3b42f5b67dd4ed15fa36a5e93d03357052798360ca38f6e60a0276a877709" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="7cee13bc0b1d8e12ce7004d9a2a43d4a9ad66aa4bc475057db9fd029ba3be77e" name="cyrus-sasl-ldap" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="834db028a471bbdd930d450b2acef1576d557d04d650e92c5f1a240871c8ca38" name="cyrus-sasl-ldap" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="ae5d9af127cc34301309e111065e8a214f0219f7950a7c04ca82eb8078e7565c" name="cyrus-sasl-lib" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="313812802700a4f81b558ae79763fe6a26b5aba24d4e00c3389178bdc4ce9b39" name="cyrus-sasl-lib" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="6096895b3a23eee19beff97c1e2d9d3bbd0b12accf5d2c835c77ecdff6201ff6" name="cyrus-sasl-md5" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="a16579533216749fd183f99419a17a735b61860de60b9b9657304c53e24100c7" name="cyrus-sasl-md5" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="61bf57ff3bf33643274d9f406479535d5a39ffbdb144340897aa912bf3c33fe4" name="cyrus-sasl-ntlm" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="42bd4597f951a60a82619cf50ad870b9a7555ed37eb1bf586316523794cd8120" name="cyrus-sasl-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="6fe1ad3d2abadbf579ed47775c197b84275d4add1b9cd09b73da4cec8d9b804d" name="cyrus-sasl-plain" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="bb45a1daea27bcb9cc7170d7f07669caba81b0001947cbfe823cdcbd9d58f7f0" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="5f53f5ca5bf14af7bc5180bc3165633158a2597e364e9a344ed19d01ae71685a" name="cyrus-sasl-scram" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="bbe025ab3e34adbe4b74a468685f1a2eafc9f21cc4fc71ccd38e7ad3ffd1dda6" name="cyrus-sasl-scram" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="a04aa8dec709076888d61261d773851daca8cb7c2e8d2c14885eff42cc45225a" name="cyrus-sasl-sql" arch="i686">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="b1f85fac714d1b9da27c5c97be4a9bad75ba13aa47b0c879e9d343c02c5749b4" name="cyrus-sasl-sql" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="2b71dee24d8129d4da00194d685f16733519ae89e820861a624a8289206ce3a5" name="daxctl" arch="i686">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="bed3afc7a761a6d2078716041196808c8e3674db0d6207415d810fa9e96c8d36" name="daxctl" arch="x86_64">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="039c79cda74aa2a8322d99db17b5a99de0160a835af4b0e1d9e99ef9b2a9081e" name="daxctl-devel" arch="i686">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="3824639c17171aa57647ced9f19d8e669feecb5c51b80c42a44665752cc67fff" name="daxctl-devel" arch="x86_64">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="92dcf5fc5f98b63933ce4b0f11dd44f83ee6ed24c74299bfe24271d18cc3a768" name="daxctl-libs" arch="i686">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="1e562d6fcbed98b13d0da91261a8523a105563c249b592158659529f90115089" name="daxctl-libs" arch="x86_64">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="f29baa913ccdb2daacd0ea814fdfba77a4be739605d39c6ca6041eac667e7f02" name="debugmode" arch="i686">
  <version epoch="0" ver="9.49.53" rel="1.el7_9.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.45-1" date="1532433600">- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.46-1" date="1535112000">- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.47-1" date="1553860800">- Fix file permissions for /var/log/dmesg</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.48-1" date="1565092800">- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.49-1" date="1566216000">- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.50-1" date="1583928000">- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.51-1" date="1584532800">- Fix inline comment - (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.con&gt; - 9.49.52-1" date="1589803200">- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1" date="1590148800">- rwtab: Add support for chrony (bug #1838260)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1.el7_9.1" date="1602590400">- rwtab: Allow updating mlocate.db (bug #1880095)</changelog>
</package>
<package pkgid="d21c1e3f437f00fc764e1c55ddac3b8b51889d5d0058e30fde31884053740e3f" name="debugmode" arch="x86_64">
  <version epoch="0" ver="9.49.53" rel="1.el7_9.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.45-1" date="1532433600">- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.46-1" date="1535112000">- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.47-1" date="1553860800">- Fix file permissions for /var/log/dmesg</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.48-1" date="1565092800">- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.49-1" date="1566216000">- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.50-1" date="1583928000">- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.51-1" date="1584532800">- Fix inline comment - (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.con&gt; - 9.49.52-1" date="1589803200">- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1" date="1590148800">- rwtab: Add support for chrony (bug #1838260)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1.el7_9.1" date="1602590400">- rwtab: Allow updating mlocate.db (bug #1880095)</changelog>
</package>
<package pkgid="fd09b38b429e2a5276ffab8749a361a96a582fb91f0a5a0ee7bffe91114af4d0" name="device-mapper" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="685d96e0a9215abf5a90cb17af872c4bea1c5838c955866d4171f7efa23dab6a" name="device-mapper" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="eef0024db263a653a7f1ee9b7311f0ea8977b9c99ae90b58dbdd2d0e5670041b" name="device-mapper" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="999ced06ded0b8a0b52e66877baa22ff9bfa48d9e37afa08e0eb185593c029d6" name="device-mapper" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="c1a0cc40a6d047e08d33a044cddf34413175b22b54cf15609181699a7a3932d0" name="device-mapper" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="621254026dfa38fc744789e0c59fc47d98cf5666fd4f3c1004714584aac4b3dc" name="device-mapper" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="ed2ca42bdd959451ccc8c9f7ff5dd42662536184947980e591eed356d12ccd2f" name="device-mapper-devel" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="6a2f46d19d3b7b5b7ca1adc3eeea8b8729e2929f2e665b1fc554ff2d56833def" name="device-mapper-devel" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="1177a35390cf7667b5e2ebae536a44b436654769f1e307832bd64d32f94a26b5" name="device-mapper-devel" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="3eb806d16f3e821c256ffcc1ff54d03d6caac36efdbee5f6d7c70f0252bb24d8" name="device-mapper-devel" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="86182670f5cdc7517e31ab7bc173efdb714d8a150f7f9171f29ea891c84cf2c2" name="device-mapper-devel" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="2158db7ee701144ac8aa089093034f8eafbf12b7830abb0dcdb6f4c75fbf3818" name="device-mapper-devel" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="e2bac302db2c18291daa90b2ee8cf308ffff140a496983d5da3e75af87929de2" name="device-mapper-event" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="93591bb7dab81f6a38c41cd49305e7d031c9265e3939d238f3f7997fc3a3dd88" name="device-mapper-event" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="e95b6ae9bf3590c8402a264dfef0f586de3758eaa0708aa1fcd0616d08ae7980" name="device-mapper-event" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="26a2e0dc4477269110966c1f72d26d0ad28d76ad9a9cb88a919d2d1d5c3459bd" name="device-mapper-event" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="18571481a31c7ebb2e160362793a7bc87c965e1b09aadcd05c3b7035478e8fd5" name="device-mapper-event" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="b5a9458ecc498d6f2b6bbbd0e56a201bf6258a7ed5bea9cd7fe2401e5533f923" name="device-mapper-event" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="b8090f03f0005d8e6f10fe7ee9a86b723e8aee17ad20b53c0915add920667ff2" name="device-mapper-event-devel" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="0c2dbaa8290407e34246bf4d60c88358d91c68b0bc3ab3a184d32b380b1d2826" name="device-mapper-event-devel" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="57028ab9ca22030d56fea3f257f3bc84e38d95155018551f47811b3dac29388b" name="device-mapper-event-devel" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="345d3b14f86c8c1f4936d84f1b21cd75f4eb281cdc2a1ea784102c1d635f9774" name="device-mapper-event-devel" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="2e9312797f4a4dd02fcd9d4d69eb9b3714b9a09bdece77c6cd153db189fab0d5" name="device-mapper-event-devel" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="825be4e0a0beab03937cb52d84012a2a66b21bc9e9049ef3f97fa72aeac5620d" name="device-mapper-event-devel" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="7335b894a4def2346d6b7abc49989db77370b9ae9ffffcd013325235ebd94330" name="device-mapper-event-libs" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="be05335fd38c334805ed7006cf2d66071eb252827d3a91fbb6609755e1a3c845" name="device-mapper-event-libs" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="36bfa2232fac490db3be05071d0d3e0376c1f6d5f152599f6b9ac554ec0f6d8c" name="device-mapper-event-libs" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="648f25a67fd8ca05ebf8517aa9222b5978ae91ffaf72fb8f6aae96901ef79f67" name="device-mapper-event-libs" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="5c7c5b0980b4c6d1d68e59d45c3c2cce26957026a98969fe2249f5f88064371d" name="device-mapper-event-libs" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="68406062a1eeaf83892ff199280b94dce1ed9aff8de72f399f31f41bd1b44849" name="device-mapper-event-libs" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="79350f9734e06445862867d4353fd5b930e85e126fbabcffbc33b35ab03610f2" name="device-mapper-libs" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="622aaede21cef8b1c9744c8dfd35273ac89c6ec776d4abfa7d8628a0d9974e1e" name="device-mapper-libs" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="eb1202b86570e34f9df188b9a2ef53ec226f174577f205f601ac43c0909eb7b4" name="device-mapper-libs" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="bd1324aa9b21bc601739a62a8bc68d793fc3d518a60a249c64c92a4487160f97" name="device-mapper-libs" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="b6cc32bb2541274332d988dd9cc13639862b6dd22d89d10e0e1028fc149016b5" name="device-mapper-libs" arch="i686">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="4fca8d8b2416b10112501bb5e996900749baaf57cd9af41976ee6c9b49dfa118" name="device-mapper-libs" arch="x86_64">
  <version epoch="7" ver="1.02.170" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="f7fb42963628cfb47a2a9f7eeb4bff95dbf2a3f244c00879f3b10a7109eeebd3" name="device-mapper-multipath" arch="i686">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="f77945d379c7c49df92d151a63ef28553da7e1df6df66faf8e8026077a133142" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="2f8fa45efa0bc9d66691833fb5639545c0afe731ed1258cbd01c26d82eb7f92d" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="1ce0cf6c9521d72e76eba4f257a99c250a65e6d38b2cd1e06ba040430b5a6f04" name="device-mapper-multipath" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="2a6703e485d40764e86b06b6a064478148d15248dda371f966705421c0dcbce8" name="device-mapper-multipath" arch="i686">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="5de82527b282db54455ac4850da0794d86e438a32a4087b9cfcca1f823007c38" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="c48973735c34322a110493a2a82fe53b21f4aba38c052d495d0e95828ab5baf4" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="62f0b1f463255c65f007f48a2b973f0d75da26b296eec7eda7b29353b0d3d5a1" name="device-mapper-multipath" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="36493dd45e5c5d6d0a59f3351848eb4cb1d9c52d6517e41d77f36fb203a6add2" name="device-mapper-multipath" arch="i686">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="a1047787f1d1bcec4e6eb528d6f7437c9ba8df7cd5287ce3dec8c8c2e0b0b8eb" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="8a9ee876e6c5742683cc1423bff892fef0a68d8c9e6742c26a803b5b82b4c716" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="9ef8410e73f1861707c40a157f9386e5d4306a9ea320edb0e2a1054ab4054954" name="device-mapper-multipath" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="871541283cceb5456fef715d9cfe65a98ba1285319c48faf673806e959612f75" name="device-mapper-multipath-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="c796238a1940134803839337483849049d1fdb6f73cc05975cb9c94a7f0bc25b" name="device-mapper-multipath-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="e9e2e4e58d18080429f7de9c8e447829eed8df7272688013d1bb25e657c2e679" name="device-mapper-multipath-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="af6e30b937fc756c4bb03e849a3d52398fd4c0c7db80b66afd41aed6aa6fbc57" name="device-mapper-multipath-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="118a8f295faa3484466dddf78acb8a9cf525b6370acbae478f3ee6e236c4b608" name="device-mapper-multipath-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="c6215824d21163682eb5cd11d8c76878620e312cb978cf8bad67a10d36984622" name="device-mapper-multipath-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="c8864628d6cf94ce203ed579aaf250bd84f3e24b7c802106c1f77f5e37dd7db7" name="device-mapper-multipath-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="ab3a61aa77b7d1e779c61b70ee8d22333cef27fb61fa1b333a5c5d042b33adbe" name="device-mapper-multipath-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="952037df453d669a302db25cf0a1aed9dd379ea398b4d28a91736d96d848b0fa" name="device-mapper-multipath-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="38fdcb1c70df4c9e5c6d26a702c34931bbf3463ee27d85b46aa8aa4dbc19453c" name="device-mapper-multipath-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="c478ac6dd0074dd084176d6658d67578088326f6dd03e87cdbdd863d7d0a874a" name="device-mapper-multipath-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="931516ad0de43429fb04bd168705300d60fe39e094fa1a759e9308083c017990" name="device-mapper-multipath-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="a8872498abf85d5e3a10abe5bffdbcd7b34467eb6b78be3bab9a0f5725de7617" name="device-mapper-multipath-libs" arch="i686">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="3f32fc77ae49ac82a6d4590936ea1a4974ec9f48b3a4bb287cbeecc16c6b6cb4" name="device-mapper-multipath-libs" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="ea42c4748156a54c53216cdacdc8bbb42709cffde25ed46a818938d6909ed1d1" name="device-mapper-multipath-libs" arch="i686">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="c0f0588ec0e1f2e3d5150f89a5b5f8d15f8c54b96dd1a1cac2f61ba0cd6dcb89" name="device-mapper-multipath-libs" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="822d71466d9276a1083d352194f996a22d5be9eaf1fef6d4ebd13043d05751db" name="device-mapper-multipath-libs" arch="i686">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="6538669fd1a9d4c3d7f002ba9db48e6bdfd7c12699114c2d0d60d2e34149b407" name="device-mapper-multipath-libs" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="7717716521fb6270fe44fd0243106ffaabd27097f45e3346534db440e57a04bf" name="device-mapper-multipath-sysvinit" arch="i686">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="3364b629350457d36e0cad745cb2a75fd459486f9e678ee8b68c4005b0336c34" name="device-mapper-multipath-sysvinit" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="51dca36cb4ef0c96a58d4d8a3f8b2000d77910ca049077e80a6522ced7f54c8f" name="device-mapper-multipath-sysvinit" arch="i686">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="407a40c08454428ff04f1cc4cadaf3ad45adfbe0fd1f2ae02d51b6e3b631bb73" name="device-mapper-multipath-sysvinit" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="f3f914b98d0a52b1bd6bf6a45042752549e6c090b2705b634cdc7f44a627c7c8" name="device-mapper-multipath-sysvinit" arch="i686">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="cc37638179a8a969a76a9f651dd797d80d18c95798dfb9122cb9820e3bf3a6e9" name="device-mapper-multipath-sysvinit" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="7ee31b3b45edbe51a6a1f4d03527959f2db02dd295da6dc1e5b4518363d100a0" name="device-mapper-persistent-data" arch="i686">
  <version epoch="0" ver="0.8.5" rel="3.el7_9.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-1" date="1507291200">- Update to latest bugfix and documentation update release.
- *_restore tools wipe superblock as a last resort.
- Add thin_check --override-mapping-root.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-2" date="1507636800">- Rebuilding with updated source tarball.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-3" date="1510660800">- Fix version 2 metadata corruption in cache_restore.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.1-1" date="1556971200">- Update to latest upstream release including various bug fixes.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.2-1" date="1558958400">- Fix tools requiring additional --repair option.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-1" date="1560168000">- Additional fixes for thin_dump and thin_repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-2" date="1574164800">- Remove obsolete pool-inactive option from thin_trim man page.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3" date="1587384000">- Check input file exists earlier.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.1" date="1600257600">- Underpopulated nodes are considered non fatal error by thin_check.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.2" date="1600689600">- Rebuild for Z stream.</changelog>
</package>
<package pkgid="9ad6d0222ad3f1c2035f4adb3c8ffa489a6e37f57052b025a567e85b2b96cd7d" name="device-mapper-persistent-data" arch="src">
  <version epoch="0" ver="0.8.5" rel="3.el7_9.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-1" date="1507291200">- Update to latest bugfix and documentation update release.
- *_restore tools wipe superblock as a last resort.
- Add thin_check --override-mapping-root.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-2" date="1507636800">- Rebuilding with updated source tarball.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-3" date="1510660800">- Fix version 2 metadata corruption in cache_restore.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.1-1" date="1556971200">- Update to latest upstream release including various bug fixes.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.2-1" date="1558958400">- Fix tools requiring additional --repair option.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-1" date="1560168000">- Additional fixes for thin_dump and thin_repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-2" date="1574164800">- Remove obsolete pool-inactive option from thin_trim man page.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3" date="1587384000">- Check input file exists earlier.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.1" date="1600257600">- Underpopulated nodes are considered non fatal error by thin_check.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.2" date="1600689600">- Rebuild for Z stream.</changelog>
</package>
<package pkgid="598cfc73ade4a5c66c813d4be7ece983bff4e3f02260476dd2f66324ef1fa565" name="device-mapper-persistent-data" arch="src">
  <version epoch="0" ver="0.8.5" rel="3.el7_9.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-1" date="1507291200">- Update to latest bugfix and documentation update release.
- *_restore tools wipe superblock as a last resort.
- Add thin_check --override-mapping-root.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-2" date="1507636800">- Rebuilding with updated source tarball.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-3" date="1510660800">- Fix version 2 metadata corruption in cache_restore.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.1-1" date="1556971200">- Update to latest upstream release including various bug fixes.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.2-1" date="1558958400">- Fix tools requiring additional --repair option.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-1" date="1560168000">- Additional fixes for thin_dump and thin_repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-2" date="1574164800">- Remove obsolete pool-inactive option from thin_trim man page.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3" date="1587384000">- Check input file exists earlier.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.1" date="1600257600">- Underpopulated nodes are considered non fatal error by thin_check.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.2" date="1600689600">- Rebuild for Z stream.</changelog>
</package>
<package pkgid="90367af667b74740f41f326d0254a4d3dfb3555f834a03ebdbd456f0aaf9ead0" name="device-mapper-persistent-data" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="3.el7_9.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-1" date="1507291200">- Update to latest bugfix and documentation update release.
- *_restore tools wipe superblock as a last resort.
- Add thin_check --override-mapping-root.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-2" date="1507636800">- Rebuilding with updated source tarball.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-3" date="1510660800">- Fix version 2 metadata corruption in cache_restore.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.1-1" date="1556971200">- Update to latest upstream release including various bug fixes.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.2-1" date="1558958400">- Fix tools requiring additional --repair option.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-1" date="1560168000">- Additional fixes for thin_dump and thin_repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-2" date="1574164800">- Remove obsolete pool-inactive option from thin_trim man page.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3" date="1587384000">- Check input file exists earlier.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.1" date="1600257600">- Underpopulated nodes are considered non fatal error by thin_check.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.2" date="1600689600">- Rebuild for Z stream.</changelog>
</package>
<package pkgid="82d3e35240db50bf0b6c29aed1012c3ae2a11330eeb639e5ee7d3bd837fe2362" name="device-mapper-persistent-data-debuginfo" arch="i686">
  <version epoch="0" ver="0.8.5" rel="3.el7_9.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-1" date="1507291200">- Update to latest bugfix and documentation update release.
- *_restore tools wipe superblock as a last resort.
- Add thin_check --override-mapping-root.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-2" date="1507636800">- Rebuilding with updated source tarball.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-3" date="1510660800">- Fix version 2 metadata corruption in cache_restore.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.1-1" date="1556971200">- Update to latest upstream release including various bug fixes.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.2-1" date="1558958400">- Fix tools requiring additional --repair option.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-1" date="1560168000">- Additional fixes for thin_dump and thin_repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-2" date="1574164800">- Remove obsolete pool-inactive option from thin_trim man page.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3" date="1587384000">- Check input file exists earlier.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.1" date="1600257600">- Underpopulated nodes are considered non fatal error by thin_check.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.2" date="1600689600">- Rebuild for Z stream.</changelog>
</package>
<package pkgid="cc9d30748310f01bf7c94a1ad7e4c2d7a53bf58cdbef7ff25964c650601baa27" name="device-mapper-persistent-data-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.5" rel="3.el7_9.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-1" date="1507291200">- Update to latest bugfix and documentation update release.
- *_restore tools wipe superblock as a last resort.
- Add thin_check --override-mapping-root.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-2" date="1507636800">- Rebuilding with updated source tarball.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-3" date="1510660800">- Fix version 2 metadata corruption in cache_restore.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.1-1" date="1556971200">- Update to latest upstream release including various bug fixes.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.2-1" date="1558958400">- Fix tools requiring additional --repair option.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-1" date="1560168000">- Additional fixes for thin_dump and thin_repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-2" date="1574164800">- Remove obsolete pool-inactive option from thin_trim man page.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3" date="1587384000">- Check input file exists earlier.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.1" date="1600257600">- Underpopulated nodes are considered non fatal error by thin_check.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.2" date="1600689600">- Rebuild for Z stream.</changelog>
</package>
<package pkgid="65e2852ff01343673cf722b8d8d5a95c84aa75ce49a0743e172055a23377dc59" name="dhclient" arch="i686">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="507f0e69af464e108c9e8908ce871bc671b43513777d444c27054a458a8f5359" name="dhclient" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="861f98bccff8e42e60105c56926b98647522ffa98d25e42ac2a7645368b6e018" name="dhcp" arch="i686">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1502880b7569fe61edc2639a2f2b09c58f90e0952c84bf234be71498d04530b2" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="883bbd36050d342b986362ed977a54424e268471824b5599fa1ee183569ae23b" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="bf908bd4502cc188823ea44806548c850726fb408eff0065aac87ba88fd8149d" name="dhcp" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="96067f00f471c610a575c87ac4b5718dd3b919dda14007a8f21a701e9ac922d6" name="dhcp-common" arch="i686">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ecabfc4ce3ff755063847f7a9c2c12858d27a5d792053d6507d2364b9d7c74bc" name="dhcp-common" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="24ecd3963166499bce7dc54feb8ab128c3953c8c3bc35e353189afe53248dd13" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="da17bcb06410b06e62dd100e12334e35401242bc12941c699871d05cb49db790" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="eea2e0ea383ffaf89188baed5ff014b6bdfe29a6c26ae3397b02f9a11e504a0a" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="dd437f7ef5af7a47b8c9d0cb6a37786be9d6f380887e815d450b35b3fbe0c6b3" name="dhcp-devel" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6daf1fc1c8094463cac6917a9fbf4e37f6da2b54a066c220e6b22a9170677a21" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d1fb24abec3ea7c87d103b9713f963c9456b492330882ef0884755343640c89e" name="dhcp-libs" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="83.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-83.el7.centos.1" date="1623240000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="59ba089b05c6753ee8ca427f1175eb8561ea2432e4c33147b32538885bc30f8e" name="diffutils" arch="i686">
  <version epoch="0" ver="3.3" rel="6.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-10" date="1348056000">- Fixed license as current source says GPLv3+.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-11" date="1351252800">- Ported i18n patch and reinstated it (bug #870460).</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.2-12" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-13" date="1361534400">- Fixed i18n handling of 'diff -E' (bug #914666).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-1" date="1364299200">- 3.3 (bug #927560).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-2" date="1382529600">- Fixed multibyte handling logic for diff -Z (bug #1022417).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-5" date="1542801600">- Resolves: #1611281, diff -y produces garbage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-6" date="1676462400">- Resolves: #2152980, regression</changelog>
</package>
<package pkgid="e7f7a8ecf3a28a479346b513c655fb0c0ae88426e3cb0d0ddf2fc870c1620149" name="diffutils" arch="src">
  <version epoch="0" ver="3.3" rel="6.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-10" date="1348056000">- Fixed license as current source says GPLv3+.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-11" date="1351252800">- Ported i18n patch and reinstated it (bug #870460).</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.2-12" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-13" date="1361534400">- Fixed i18n handling of 'diff -E' (bug #914666).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-1" date="1364299200">- 3.3 (bug #927560).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-2" date="1382529600">- Fixed multibyte handling logic for diff -Z (bug #1022417).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-5" date="1542801600">- Resolves: #1611281, diff -y produces garbage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-6" date="1676462400">- Resolves: #2152980, regression</changelog>
</package>
<package pkgid="7a0cd5e021d5be9f7a23d909139aa136a685273e179bc6c1dea2cb20541a5c03" name="diffutils" arch="src">
  <version epoch="0" ver="3.3" rel="6.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-10" date="1348056000">- Fixed license as current source says GPLv3+.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-11" date="1351252800">- Ported i18n patch and reinstated it (bug #870460).</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.2-12" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-13" date="1361534400">- Fixed i18n handling of 'diff -E' (bug #914666).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-1" date="1364299200">- 3.3 (bug #927560).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-2" date="1382529600">- Fixed multibyte handling logic for diff -Z (bug #1022417).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-5" date="1542801600">- Resolves: #1611281, diff -y produces garbage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-6" date="1676462400">- Resolves: #2152980, regression</changelog>
</package>
<package pkgid="bef7ccb421d734dcae34386873e2e11557dbff377131374a6d332818e8a0bc61" name="diffutils" arch="x86_64">
  <version epoch="0" ver="3.3" rel="6.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-10" date="1348056000">- Fixed license as current source says GPLv3+.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-11" date="1351252800">- Ported i18n patch and reinstated it (bug #870460).</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.2-12" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-13" date="1361534400">- Fixed i18n handling of 'diff -E' (bug #914666).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-1" date="1364299200">- 3.3 (bug #927560).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-2" date="1382529600">- Fixed multibyte handling logic for diff -Z (bug #1022417).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-5" date="1542801600">- Resolves: #1611281, diff -y produces garbage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-6" date="1676462400">- Resolves: #2152980, regression</changelog>
</package>
<package pkgid="4127708264607b3ed4b8d171e959c749110cf3c948331016f8881820bd16d81b" name="diffutils-debuginfo" arch="i686">
  <version epoch="0" ver="3.3" rel="6.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-10" date="1348056000">- Fixed license as current source says GPLv3+.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-11" date="1351252800">- Ported i18n patch and reinstated it (bug #870460).</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.2-12" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-13" date="1361534400">- Fixed i18n handling of 'diff -E' (bug #914666).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-1" date="1364299200">- 3.3 (bug #927560).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-2" date="1382529600">- Fixed multibyte handling logic for diff -Z (bug #1022417).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-5" date="1542801600">- Resolves: #1611281, diff -y produces garbage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-6" date="1676462400">- Resolves: #2152980, regression</changelog>
</package>
<package pkgid="b0e36c4bed29eea50b87cab5917f024b6185edf84c168ab5f154065ee4f4cea6" name="diffutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3" rel="6.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-10" date="1348056000">- Fixed license as current source says GPLv3+.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-11" date="1351252800">- Ported i18n patch and reinstated it (bug #870460).</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.2-12" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-13" date="1361534400">- Fixed i18n handling of 'diff -E' (bug #914666).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-1" date="1364299200">- 3.3 (bug #927560).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-2" date="1382529600">- Fixed multibyte handling logic for diff -Z (bug #1022417).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-5" date="1542801600">- Resolves: #1611281, diff -y produces garbage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-6" date="1676462400">- Resolves: #2152980, regression</changelog>
</package>
<package pkgid="0a2994f92c55916d4d491c5403a67e3b4381c651446eaa62fd25f0135ac52488" name="dmidecode" arch="i686">
  <version epoch="1" ver="3.2" rel="5.el7_9.1"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-2" date="1467201600">- Unmask LRDIMM in memmory type detail
- Resolves: #1321342</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-3" date="1478606400">- Hide irrelevant fixup message
- Resolves: #1384195</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-4" date="1488283200">- Sync with upstream
- Resolves: #1385884</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-5" date="1493812800">- Update compiler flags for hardened builds
- Resolves: #1420763</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.1-1" date="1524744000">- Sync with upstream
- Resolves: rhbz#1568227</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-1" date="1541505600">- Sync with upstream 3.2
- Resolves: rhbz#1628992</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-3" date="1556280000">- Add "Logical non-volatile device" to the memory device types
- Resolves: rhbz#1664921</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-4" date="1584532800">- Fix System Slot Information for PCIe SSD
- Resolves: rhbz#1793900
- Sync with upstream(commit:62bce59fed1)
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5" date="1585569600">- Revert this patch("Use larger units for memory device and BIOS size")
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5.1" date="1610452800">- Fix the "OUT OF SPEC" error for empty NVMe and DIMM slots
- Resolves: rhbz#1858345</changelog>
</package>
<package pkgid="9b43a84191728b2e03cba4cc8637e8899c906a4968edc48492a7576058854dfa" name="dmidecode" arch="src">
  <version epoch="1" ver="3.2" rel="5.el7_9.1"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-2" date="1467201600">- Unmask LRDIMM in memmory type detail
- Resolves: #1321342</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-3" date="1478606400">- Hide irrelevant fixup message
- Resolves: #1384195</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-4" date="1488283200">- Sync with upstream
- Resolves: #1385884</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-5" date="1493812800">- Update compiler flags for hardened builds
- Resolves: #1420763</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.1-1" date="1524744000">- Sync with upstream
- Resolves: rhbz#1568227</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-1" date="1541505600">- Sync with upstream 3.2
- Resolves: rhbz#1628992</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-3" date="1556280000">- Add "Logical non-volatile device" to the memory device types
- Resolves: rhbz#1664921</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-4" date="1584532800">- Fix System Slot Information for PCIe SSD
- Resolves: rhbz#1793900
- Sync with upstream(commit:62bce59fed1)
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5" date="1585569600">- Revert this patch("Use larger units for memory device and BIOS size")
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5.1" date="1610452800">- Fix the "OUT OF SPEC" error for empty NVMe and DIMM slots
- Resolves: rhbz#1858345</changelog>
</package>
<package pkgid="2eca04bda697a714147dc6ca7d75762dac0b2150fe3274386af6ff6763f6686e" name="dmidecode" arch="src">
  <version epoch="1" ver="3.2" rel="5.el7_9.1"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-2" date="1467201600">- Unmask LRDIMM in memmory type detail
- Resolves: #1321342</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-3" date="1478606400">- Hide irrelevant fixup message
- Resolves: #1384195</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-4" date="1488283200">- Sync with upstream
- Resolves: #1385884</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-5" date="1493812800">- Update compiler flags for hardened builds
- Resolves: #1420763</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.1-1" date="1524744000">- Sync with upstream
- Resolves: rhbz#1568227</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-1" date="1541505600">- Sync with upstream 3.2
- Resolves: rhbz#1628992</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-3" date="1556280000">- Add "Logical non-volatile device" to the memory device types
- Resolves: rhbz#1664921</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-4" date="1584532800">- Fix System Slot Information for PCIe SSD
- Resolves: rhbz#1793900
- Sync with upstream(commit:62bce59fed1)
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5" date="1585569600">- Revert this patch("Use larger units for memory device and BIOS size")
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5.1" date="1610452800">- Fix the "OUT OF SPEC" error for empty NVMe and DIMM slots
- Resolves: rhbz#1858345</changelog>
</package>
<package pkgid="ea6c1c652a77be167ecaa60635db6d93c8120829dc40f1ded6be5be4a8f4ec3c" name="dmidecode" arch="x86_64">
  <version epoch="1" ver="3.2" rel="5.el7_9.1"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-2" date="1467201600">- Unmask LRDIMM in memmory type detail
- Resolves: #1321342</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-3" date="1478606400">- Hide irrelevant fixup message
- Resolves: #1384195</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-4" date="1488283200">- Sync with upstream
- Resolves: #1385884</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-5" date="1493812800">- Update compiler flags for hardened builds
- Resolves: #1420763</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.1-1" date="1524744000">- Sync with upstream
- Resolves: rhbz#1568227</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-1" date="1541505600">- Sync with upstream 3.2
- Resolves: rhbz#1628992</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-3" date="1556280000">- Add "Logical non-volatile device" to the memory device types
- Resolves: rhbz#1664921</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-4" date="1584532800">- Fix System Slot Information for PCIe SSD
- Resolves: rhbz#1793900
- Sync with upstream(commit:62bce59fed1)
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5" date="1585569600">- Revert this patch("Use larger units for memory device and BIOS size")
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5.1" date="1610452800">- Fix the "OUT OF SPEC" error for empty NVMe and DIMM slots
- Resolves: rhbz#1858345</changelog>
</package>
<package pkgid="ad01f35f9539716a007db1efdad3a313e09f4982e56308714c69f180817d0b1d" name="dmidecode-debuginfo" arch="i686">
  <version epoch="1" ver="3.2" rel="5.el7_9.1"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-2" date="1467201600">- Unmask LRDIMM in memmory type detail
- Resolves: #1321342</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-3" date="1478606400">- Hide irrelevant fixup message
- Resolves: #1384195</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-4" date="1488283200">- Sync with upstream
- Resolves: #1385884</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-5" date="1493812800">- Update compiler flags for hardened builds
- Resolves: #1420763</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.1-1" date="1524744000">- Sync with upstream
- Resolves: rhbz#1568227</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-1" date="1541505600">- Sync with upstream 3.2
- Resolves: rhbz#1628992</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-3" date="1556280000">- Add "Logical non-volatile device" to the memory device types
- Resolves: rhbz#1664921</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-4" date="1584532800">- Fix System Slot Information for PCIe SSD
- Resolves: rhbz#1793900
- Sync with upstream(commit:62bce59fed1)
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5" date="1585569600">- Revert this patch("Use larger units for memory device and BIOS size")
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5.1" date="1610452800">- Fix the "OUT OF SPEC" error for empty NVMe and DIMM slots
- Resolves: rhbz#1858345</changelog>
</package>
<package pkgid="1b631c6f45d2b4c3adc4d5fd33e7da78c6e1e4d249894322b91d79bd74407a06" name="dmidecode-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.2" rel="5.el7_9.1"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-2" date="1467201600">- Unmask LRDIMM in memmory type detail
- Resolves: #1321342</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-3" date="1478606400">- Hide irrelevant fixup message
- Resolves: #1384195</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-4" date="1488283200">- Sync with upstream
- Resolves: #1385884</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-5" date="1493812800">- Update compiler flags for hardened builds
- Resolves: #1420763</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.1-1" date="1524744000">- Sync with upstream
- Resolves: rhbz#1568227</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-1" date="1541505600">- Sync with upstream 3.2
- Resolves: rhbz#1628992</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-3" date="1556280000">- Add "Logical non-volatile device" to the memory device types
- Resolves: rhbz#1664921</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-4" date="1584532800">- Fix System Slot Information for PCIe SSD
- Resolves: rhbz#1793900
- Sync with upstream(commit:62bce59fed1)
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5" date="1585569600">- Revert this patch("Use larger units for memory device and BIOS size")
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5.1" date="1610452800">- Fix the "OUT OF SPEC" error for empty NVMe and DIMM slots
- Resolves: rhbz#1858345</changelog>
</package>
<package pkgid="048f143bfe9774f160275b9fbde17bcb1790e55317a557a6be224d36ee86e2c9" name="dnf-plugin-subscription-manager" arch="i686">
  <version epoch="0" ver="1.24.45" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.36-1" date="1588680000">- 1831104: When in Simple Content Access mode, subscription-manager should not
  complain that subscriptions aren't attached (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.37-1" date="1588939200">- 1830994: Fix warning messages in dnf/yum (jhnidek@redhat.com)
- 1823523: Detect rhsm-icon running without psutil (csnyder@redhat.com)
- 1771921: Package profiles sends too early when registering a client
  (wpoteat@redhat.com)
- 1688702: Generate redhat.repo in off-line mode; ENT-2302 (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.38-1" date="1590580800">- 1837244: Fix wrong version provided by subscription-manager version; ENT-2388
  (jhnidek@redhat.com)
- 1834792: Try to terminate rhsmd after timeout; ENT-2368 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="055f7a134d903c853083616e3f4eacf280c50becf30ae5198f385684eec2ba11" name="dnf-plugin-subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.24.45" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.36-1" date="1588680000">- 1831104: When in Simple Content Access mode, subscription-manager should not
  complain that subscriptions aren't attached (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.37-1" date="1588939200">- 1830994: Fix warning messages in dnf/yum (jhnidek@redhat.com)
- 1823523: Detect rhsm-icon running without psutil (csnyder@redhat.com)
- 1771921: Package profiles sends too early when registering a client
  (wpoteat@redhat.com)
- 1688702: Generate redhat.repo in off-line mode; ENT-2302 (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.38-1" date="1590580800">- 1837244: Fix wrong version provided by subscription-manager version; ENT-2388
  (jhnidek@redhat.com)
- 1834792: Try to terminate rhsmd after timeout; ENT-2368 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="270f38cf312fe22dc8b78cea8723e0267c7437ac44edab20bdf7f29578f73546" name="dnf-plugin-subscription-manager" arch="i686">
  <version epoch="0" ver="1.24.48" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
</package>
<package pkgid="62141f2670750c73318412db31b6564012db18bc092f5b4e32f8c751b1351a64" name="dnf-plugin-subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.24.48" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
</package>
<package pkgid="aa89ab71a1191f7f2c5df34c755380b95fa2f4e9c809c490cd180aa653651eb4" name="dnf-plugin-subscription-manager" arch="i686">
  <version epoch="0" ver="1.24.50" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="e729fd20aa71ca695d8aef3a169aa40fa12f25a7d35a527089b9feefd12fa056" name="dnf-plugin-subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.24.50" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="c6d36cab856165df5c6f48638ee336c32b8ed4ed9ab0f60d63b661540d8d5ef4" name="dnf-plugin-subscription-manager" arch="i686">
  <version epoch="0" ver="1.24.51" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="871146fb6417562f1c54e84480f221ddb19bfef8179ca2b819045714b013be60" name="dnf-plugin-subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.24.51" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="6481abd6f7984c30de608b3a5fe9cf36b72e6611bbe710ce94ec05dbb863028b" name="dnf-plugin-subscription-manager" arch="i686">
  <version epoch="0" ver="1.24.52" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
</package>
<package pkgid="0306ca5a005abd0b148968c1c5597ebad9a263d25a6acf1763cc71d1dd983804" name="dnf-plugin-subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.24.52" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
</package>
<package pkgid="c27013eadef009b4d05c0496b8422ae65a00810a4bb40f916966ba9e940c9a34" name="dnf-plugin-subscription-manager" arch="i686">
  <version epoch="0" ver="1.24.52" rel="2.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="f5478b548a2329efc35c840498e1f6a80d22485dc9c717a35df635f70b7005ba" name="dnf-plugin-subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.24.52" rel="2.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="79c721d48f811902289548591228bcfacc685b55c9d4edb92fe24bb7755f24a0" name="dnf-plugin-subscription-manager" arch="i686">
  <version epoch="0" ver="1.24.52" rel="2.el7_9"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="645792929dd4f648301a8da1c0cae0a907dbe8d945cac46976450835374c8a83" name="dnf-plugin-subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.24.52" rel="2.el7_9"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="fa2171866673d97b9e17216065b7ca64af2f4ad829261e147dc8599d3b9dc351" name="dnf-plugin-subscription-manager" arch="i686">
  <version epoch="0" ver="1.24.53" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.53-1" date="1695384000">- 2229752: [1.24] Hotfix of D-Bus policy (jhnidek@redhat.com)
- Collect GCP Project information as cloud facts (chambrid@redhat.com)
- Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
- Stop requiring M2crypto (ptoscano@redhat.com)
- tests: make M2Crypto optional (ptoscano@redhat.com)</changelog>
</package>
<package pkgid="9bc1215bb0c8d5525ad02bdfcdd0d97d5b467701560edbfad6ae90f089809ad4" name="dnf-plugin-subscription-manager" arch="x86_64">
  <version epoch="0" ver="1.24.53" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.53-1" date="1695384000">- 2229752: [1.24] Hotfix of D-Bus policy (jhnidek@redhat.com)
- Collect GCP Project information as cloud facts (chambrid@redhat.com)
- Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
- Stop requiring M2crypto (ptoscano@redhat.com)
- tests: make M2Crypto optional (ptoscano@redhat.com)</changelog>
</package>
<package pkgid="68a6013aad14be60f3ea02656b961401dbd09d5144cea6fc9d2f54548e83e3e8" name="dnsmasq" arch="i686">
  <version epoch="0" ver="2.76" rel="16.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
</package>
<package pkgid="0185a77841f5a695b4a3659ab9044689b2794730b2e757633812af550ff416ce" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="16.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
</package>
<package pkgid="1d9e3ba8533fdad5257edd8774f68a386f465f780c6cdcb9e608f8f793bd27be" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="16.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
</package>
<package pkgid="5b77d5304c32d896919750482729e8e90c10773eebbcb9ba9245dbb119194f95" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.76" rel="16.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
</package>
<package pkgid="a19d52bff1bb79f982ab9a528747f79e018ef45a2274c9b35eb6d3519eb4e16d" name="dnsmasq" arch="i686">
  <version epoch="0" ver="2.76" rel="17.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
</package>
<package pkgid="f21f83ae7b6be0303df89b9cc65533156187ee03718c88535f19fc48e8027d18" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="17.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
</package>
<package pkgid="66a8e3bc2b20526ad7aae81799864170d6e4a6c0a90055c848c19c2f46eeecaa" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="17.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
</package>
<package pkgid="73bd546ae8d60d7355f9c7cb8dff22904c36a4ac3d457d2b0deadaaf5fabb873" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.76" rel="17.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
</package>
<package pkgid="608dcb994f5a71ccd8d3a2c0d0dcc7a4aa3e6b594e280fb97709a83b5ead85b2" name="dnsmasq" arch="i686">
  <version epoch="0" ver="2.76" rel="17.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.2" date="1614600000">- Correct two regressions introduced by CVE fixes (#1923913)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.3" date="1614945600">- Accept replies from bound sockets again (#1923913)</changelog>
</package>
<package pkgid="e1d57455efd93d9c29bf73ea60278d3c3ab184984fe9f16e51d168345d8a491c" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="17.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.2" date="1614600000">- Correct two regressions introduced by CVE fixes (#1923913)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.3" date="1614945600">- Accept replies from bound sockets again (#1923913)</changelog>
</package>
<package pkgid="c9b94d931f6300ff89b2dd700c8c682abb7307843d9a644deaec40f2371af322" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="17.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.2" date="1614600000">- Correct two regressions introduced by CVE fixes (#1923913)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.3" date="1614945600">- Accept replies from bound sockets again (#1923913)</changelog>
</package>
<package pkgid="3fbc3b3039f8540a4f8a95611a61b070aecf1431a8557a3bda35d13b8e76255c" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.76" rel="17.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.2" date="1614600000">- Correct two regressions introduced by CVE fixes (#1923913)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.3" date="1614945600">- Accept replies from bound sockets again (#1923913)</changelog>
</package>
<package pkgid="bad58dd053f71f856c1937429b6982b80bbf8200df94537f8d963820bf5af0a4" name="dnsmasq-debuginfo" arch="i686">
  <version epoch="0" ver="2.76" rel="16.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
</package>
<package pkgid="8dce382756f5a555617667295dda1994deba0eb07738471e3965bf3e4beb1769" name="dnsmasq-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.76" rel="16.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
</package>
<package pkgid="c68641422f3eb390e088fb0c1f9fc990896b11816ac3dbe87f0ef69a79676aac" name="dnsmasq-debuginfo" arch="i686">
  <version epoch="0" ver="2.76" rel="17.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
</package>
<package pkgid="406cdc3360ebb31084cf028666a093b6ab0308751ccb8f08fff7cc4f6f003dd5" name="dnsmasq-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.76" rel="17.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
</package>
<package pkgid="58b2c2ecd744cb9becd446a1e2eac503f662529b8e9e7932ff259654c75d6615" name="dnsmasq-debuginfo" arch="i686">
  <version epoch="0" ver="2.76" rel="17.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.2" date="1614600000">- Correct two regressions introduced by CVE fixes (#1923913)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.3" date="1614945600">- Accept replies from bound sockets again (#1923913)</changelog>
</package>
<package pkgid="3f16bcc039078f1a168a9367af03b19bf93c12ec1f9c20d8d6c637451764f81a" name="dnsmasq-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.76" rel="17.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.2" date="1614600000">- Correct two regressions introduced by CVE fixes (#1923913)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.3" date="1614945600">- Accept replies from bound sockets again (#1923913)</changelog>
</package>
<package pkgid="e4c5293fc261efc0990c30170d1a5ee98ca5187207d0ab9913995bceae01e8f3" name="dnsmasq-utils" arch="i686">
  <version epoch="0" ver="2.76" rel="16.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
</package>
<package pkgid="c594d3ccaeeb8e55e7216c735c265c1bd658410859e6d265b41bc0d993b7e179" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.76" rel="16.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
</package>
<package pkgid="41fccaa8e245b6f179218f31a6639ef59f3f872b6900ded46299b5e65d668723" name="dnsmasq-utils" arch="i686">
  <version epoch="0" ver="2.76" rel="17.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
</package>
<package pkgid="7164c1f45e6633505aa437a2068fb5c28e1cd3bd15066185669eddf8ec630a6f" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.76" rel="17.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
</package>
<package pkgid="99ccf90c49073ff692610333e5296dc2a49785852fed620150089a3a49c1e83f" name="dnsmasq-utils" arch="i686">
  <version epoch="0" ver="2.76" rel="17.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.2" date="1614600000">- Correct two regressions introduced by CVE fixes (#1923913)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.3" date="1614945600">- Accept replies from bound sockets again (#1923913)</changelog>
</package>
<package pkgid="5a3af0b71a733eb2f9ef446918aabd33ac52134028bbaa6de3d26b70280b6c72" name="dnsmasq-utils" arch="x86_64">
  <version epoch="0" ver="2.76" rel="17.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.2" date="1614600000">- Correct two regressions introduced by CVE fixes (#1923913)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.3" date="1614945600">- Accept replies from bound sockets again (#1923913)</changelog>
</package>
<package pkgid="64bbe2b37021215194db8506a9335849c6eb33f8a177edc6abf8019b30a9fbe9" name="emacs" arch="i686">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="1fb8b35439c23badcd22613c28cd4c6936fb4b1c10a5208a0cc56ee165e6c64c" name="emacs" arch="src">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="0cef51124b144d9af38fb224a2604d9a4ee9a67e21f67a55ec76bb666cf8a0d3" name="emacs" arch="src">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="33e6ac97b68a63dc972149dde97c87949e76e70576d44037d4dfc111bf5dfefc" name="emacs" arch="x86_64">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="d968d57d342477a756ed4d55068dbedd119642e58838cfb8eeb2976fef52f033" name="emacs-common" arch="i686">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="3ea2e2817d483eeb9669ef28f862f8b2bfad025228a98b0c69e3cea9326fedd8" name="emacs-common" arch="x86_64">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="8ea7e694e71c07288d95d8d2911bc72a71cad5ed6c327ebdff8ef29c3639d626" name="emacs-debuginfo" arch="i686">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="e1ca0b4b42c864ae306c0270de497ae3e887c133f2b9cd284e59bd530b252f4f" name="emacs-debuginfo" arch="x86_64">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="f73dffb28b162af7ab0146c2e8ca1712af93c749778f5bcf5ca257e77e7b39c1" name="emacs-el" arch="noarch">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="0e68d90836d03e7187ffd1b86cf757a930e568a45cdc01c8ab1285d49e203a19" name="emacs-el" arch="noarch">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="e68b32d4ec96170189e035926fcde620997c9ced14d8513d976be3ee675d998c" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="16b10b272e356acb9185ec3b3712d192da3de8498c18eab7fb570a2999cd5fa2" name="emacs-filesystem" arch="noarch">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="2e59f07e07cab27d46d9b7382187e7633f581d63d5d1fe6fd4d0d1779a0b9fcf" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="9f56f34b7e830c0903db9382af036bb11be44af37ccdaa242f8b8968f883f820" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="a872ab8cbc06e9449f026e2bf8bdc1709d0c54639ec5928c68654d72c3cc5c2f" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="66e391d5f0deab8d08c60ed8b8fefba43a4455398b6a34768e5894a989b528ca" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="e05607e09fb8f7862de28feabac1fca1e1f040cd34b1b82b55f5a0db454e0fe6" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="03c60e4635033c31b9a7e884a0f8d29c95af696aeb4fb84bd64f977450c42625" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="2894d74155e9933ac772773438cdfa2d45867e9bccb9aca742e31726899013f9" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="508b73c96e5d7878fc6f6181fdfb1c2ad7b885c98de0b502007cea4b2033b526" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="ba2bfe7671ca405a867179b1a7db08dd80f660511dfc0e179a10f402aa8712de" name="emacs-nox" arch="i686">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="cbf81950fe57a050f0322decf9f3055be63af0801db78ad87274938f2744f63b" name="emacs-nox" arch="x86_64">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="df43f7b5474a657f476c71a85bd3c3d58bb68136954eb3f61585f988b9f9594a" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="f1b13994256a42665d1c3296008feeb9360f15e52c07aa3832e94255610c63a7" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="673ba888067a73b6de213e9cbb116ebe9c74b335e4b173481b69055f9f651e79" name="evolution-data-server" arch="i686">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="2f70c150cbbe0c66d366c892165eb15bf6d60ca1f7b397a4f3cadaef456a932a" name="evolution-data-server" arch="src">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="a8a7005be1fa29e6717b2efb5d8e04e3ada7d7c80ead5e123373fa01352ec8b2" name="evolution-data-server" arch="src">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="16a07ca92edde1d5c6f1dd4490bd2d29eba1b809a1b905b5eb9dd60b932c863a" name="evolution-data-server" arch="x86_64">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="947194ff4ad04e7b1427a8db758cd22b22f4bb8c83ebd1f5e8518ebae273a5ef" name="evolution-data-server-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="35e697a8e59ef7c66374b12e6a3dca435fe13fe087544c220d186541dad41f7d" name="evolution-data-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="4b07034e348a8b8a4faedc88639f58155aab25139542a95aa9fe5a1ddbbd135f" name="evolution-data-server-devel" arch="i686">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="c374382d5cb458c9e45c45b12f49265529ce1e9d5bd87162e481ece42371f318" name="evolution-data-server-devel" arch="x86_64">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="862a55525933a176204ccca6d37ee021bbc61927853b457d335b3d81141fd52c" name="evolution-data-server-doc" arch="noarch">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="f34c0bf62ba113b63b0aca95599525091f04c7bdb6155349ecc83b8923790360" name="evolution-data-server-doc" arch="noarch">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="805edebdb695e68605a383dc30e926aca8463d2a941d13be904fe82792cbe685" name="evolution-data-server-langpacks" arch="noarch">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="5414ab871efd7bfa46b6f448ca1a4fc37d8e3c8054281fcf7e00ff0022dbb35b" name="evolution-data-server-langpacks" arch="noarch">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="3924c89ef74e4ff1587a9916df3305e56968fa74529bee88e909122ce07fea19" name="evolution-data-server-perl" arch="i686">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="e6aba7e6eb9104f17cdb758c7f1a841315f6fd76dc8e9f0d4db885a6cc89e7b4" name="evolution-data-server-perl" arch="x86_64">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="e8bbf629089b166c6412719a39674c50fd9a597dcf841c90fdb9bddd9346ff56" name="evolution-data-server-tests" arch="i686">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="ca6843ea8a963e5782246adf2d8749c7e9db1bd6efd1aff6279657f03210fac4" name="evolution-data-server-tests" arch="x86_64">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="815ba65fbd23926cf97b97502488f7a795267f3e6ee035ceaa8cbe621fe9b308" name="evolution-ews" arch="i686">
  <version epoch="0" ver="3.28.5" rel="8.el7_9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529928000">- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1541764800">- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1565784000">- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1571918400">- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1572350400">- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-6" date="1588680000">- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-7" date="1603108800">- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-8" date="1603800000">- Resolves: #1891558 (Birthday date of Contact depends on system timezone)</changelog>
</package>
<package pkgid="5c3d1e254bba5d877ae80ac39d07dbeaec7eb3be138759bd97d9ddc10defe31f" name="evolution-ews" arch="src">
  <version epoch="0" ver="3.28.5" rel="8.el7_9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529928000">- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1541764800">- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1565784000">- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1571918400">- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1572350400">- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-6" date="1588680000">- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-7" date="1603108800">- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-8" date="1603800000">- Resolves: #1891558 (Birthday date of Contact depends on system timezone)</changelog>
</package>
<package pkgid="8995b7d205af08ac00f1640a90dbbcbb7f83cb40845e6f247a912ea58c75ea7f" name="evolution-ews" arch="src">
  <version epoch="0" ver="3.28.5" rel="8.el7_9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529928000">- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1541764800">- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1565784000">- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1571918400">- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1572350400">- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-6" date="1588680000">- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-7" date="1603108800">- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-8" date="1603800000">- Resolves: #1891558 (Birthday date of Contact depends on system timezone)</changelog>
</package>
<package pkgid="26905943633310d38ba92498df14c7f1ca639056780eec8a8ad3ba8a883e560b" name="evolution-ews" arch="x86_64">
  <version epoch="0" ver="3.28.5" rel="8.el7_9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529928000">- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1541764800">- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1565784000">- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1571918400">- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1572350400">- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-6" date="1588680000">- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-7" date="1603108800">- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-8" date="1603800000">- Resolves: #1891558 (Birthday date of Contact depends on system timezone)</changelog>
</package>
<package pkgid="af5e4fb2be859a7eb4e4bb735e40ed50d439a3823375ae21ec70c4c2cf80aa02" name="evolution-ews-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.5" rel="8.el7_9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529928000">- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1541764800">- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1565784000">- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1571918400">- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1572350400">- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-6" date="1588680000">- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-7" date="1603108800">- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-8" date="1603800000">- Resolves: #1891558 (Birthday date of Contact depends on system timezone)</changelog>
</package>
<package pkgid="e4890faf28e2e6aa7a4d5848c41a1d5681d88f7cdbeab6f9031a0ee0c853c314" name="evolution-ews-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.5" rel="8.el7_9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529928000">- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1541764800">- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1565784000">- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1571918400">- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1572350400">- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-6" date="1588680000">- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-7" date="1603108800">- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-8" date="1603800000">- Resolves: #1891558 (Birthday date of Contact depends on system timezone)</changelog>
</package>
<package pkgid="07c75585a9d5966e1661701b5bb83081b9097249bcfb32919351f1e4238944ea" name="evolution-ews-langpacks" arch="noarch">
  <version epoch="0" ver="3.28.5" rel="8.el7_9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529928000">- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1541764800">- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1565784000">- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1571918400">- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1572350400">- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-6" date="1588680000">- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-7" date="1603108800">- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-8" date="1603800000">- Resolves: #1891558 (Birthday date of Contact depends on system timezone)</changelog>
</package>
<package pkgid="2730fe646e229828ce3de6f68676ee46007bf298f59c100a5aa401f5971fb47c" name="evolution-ews-langpacks" arch="noarch">
  <version epoch="0" ver="3.28.5" rel="8.el7_9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529928000">- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1541764800">- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1565784000">- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1571918400">- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1572350400">- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-6" date="1588680000">- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-7" date="1603108800">- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-8" date="1603800000">- Resolves: #1891558 (Birthday date of Contact depends on system timezone)</changelog>
</package>
<package pkgid="03ddc162b171e62ef6920e2bf7031d738913da2bf9baeb37c8fd82121123dc74" name="exchange-bmc-os-info" arch="noarch">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="5240d66836cd9afe8b7ac5d16302f7fdba4a6c2278f361892e2755c41e79061a" name="exchange-bmc-os-info" arch="noarch">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="0a00a41312a5b48637aba674374fc801f87fe6f2c463111be94f1c171564311a" name="exchange-bmc-os-info" arch="noarch">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="38d123d5bbe360234b60f49bc39f544c99049f55f23d87bad6e9e78be204b0bb" name="exchange-bmc-os-info" arch="noarch">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="bbdd94fbd0dc33ce7ac665b436570cdd64a58a72063706919ff7b716bf4e6f10" name="expat" arch="i686">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="6f8b0ecef06b6916c2b34e4d30823120a6e14ae45332128692bddd32cad9ae41" name="expat" arch="src">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="e4dd37b3ed3a4381bf0411d8bf177405abfbcc26041d7d97e3f31dd3dafd329f" name="expat" arch="src">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="71dd7fe8021681d23bf524dedc86c6d24e1c3e18aab1ad6784f2954e07158653" name="expat" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="df0338ab2db6a5073dbe5d91ebc000fb8ab1ff80014ed9e984098853cb77cae2" name="expat" arch="i686">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="01575bdb631b2e3ed337773f44cee1926c3c3c704956f77c306e7a20e5c282d0" name="expat" arch="src">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="d2db40d9ff688fe83a41c878765e49e9b5250c87eabaf73e678dbe1448fada81" name="expat" arch="src">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="ca23bc87204c4791a3dad42c5483dc6709f765fc415ac06013c3177e06566cc2" name="expat" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="6016c37fde16799e15e8c9e76f2d0ece33ea06022738395bdc2f64c8fee62e51" name="expat-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="98b6f2915d6cebb9e8d3128f48f61bd4287608db73f9455223a8c7d5512e73f3" name="expat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="5993860af3029e2582eaaffd280f1f350d007ba3c6bf7cb80a0250b6dd2e928b" name="expat-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="647933ec0e2b3efc640d269c2cf988dd07118ca41858f69b468cb087308e9f23" name="expat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="f673151893f56b1b6b913e56bb561824d13b9b5a084b28a06120129f3a7ec9df" name="expat-devel" arch="i686">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="9c8cf0baef59fdfad1d93deb4c6aca4beec874c33c6ada668db2a87b1bbf82f4" name="expat-devel" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="ff6d00e9ce2384c1954502cc10bfd00b7bd492339bd6375cfbd2aabdaa3b76bb" name="expat-devel" arch="i686">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="ebf38b39a92121b6cf981a108f303416788251a6acc15277080c70e4ae1f02c6" name="expat-devel" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="ce73603ecea4b7e5619288d801816c530f1fceb98ffab137b6d1e4ceb8b32554" name="expat-static" arch="i686">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="165cae09e6f30b7b96a6ca39be48f2a4de824e6898215f095b8ff19c7e1fa716" name="expat-static" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="c354a7baa49e6db9d57ce2ec00943cd54d1eec356a93afaa2ff22f6cd2d76381" name="expat-static" arch="i686">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="0dc25a9959c434ec6d501df6ef1ece43e180f65ce8aa25fd5a6f4bae67060964" name="expat-static" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="5f811bab11da64627e284eb4f1ff2c262c82e28cceba88721cbc1391f3b31d92" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="424382d4c307c438c3736d6b90ea2a6209ff0b49d19a9f9f0880c88796af7faf" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="e38be86356995dca24a6f2343eeee69fd59b19c53f9ee815bde0574a3e3b22e3" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="ea0158c00f8fa7e8bb78686db9bc60cc1c4a3558947eb9e537b399ecedafb7e2" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="9f5acf42395bed2170e7c315dd146b2a63c9656f1460d4a8aea0ce27a00e931d" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="1ef4aff963f735bb45e5478ddb124b4b52c9c5f084508fc870050a5997ec98dc" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="aa9e0c379360dae3b6941ced35c7b1614475420b9f3cba427cb035dfc7f75fb8" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="84cbcb00a68d6e3ba5eb1349d8f0dfab35478daa7c0dd1be871730cd732f49a4" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="0e88f8ecdbbc2dab25baa88fd4191fda3966eb45c69f2082419a3c89f14b50ab" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="cf68ddb1b971d0a12a77c7c4773892711ada124e258df128505f252f893d1491" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="1f20cdf5b892b4533de1d907de1e7b501859ac5e2f1a2438d793112191b0a4d9" name="fence-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="35ae6b952c1e036ce0995eabed824f1442fec5a3fac97dfd13aa061a27d1aee6" name="fence-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="b7972fd8589b27182b4339046fbd6c34b9d2d1c45684d3e8e33f439dae7e7a3f" name="fence-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="67e1dddb255cb316939017d2f4dbcce380c97ad0e15375e3dce0e89ca1fddc78" name="fence-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="896245b264d9eded30750f7f93956a2aa219bcd72c7d7961fc133258b11e06d2" name="fence-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="d519707f0abf4c1347eafe4e5c6d752cfd6d1a387b3efd47146ee440798ee323" name="fence-agents-all" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="c33e052efb67e3cb47e2aeeafe09d3981f10c7d5458b0293c11951ed1a9ee12d" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="4dd7b2f207f9037cf2e071a7fcbde1ffdcc54f90c13b626fe988ab662bd4f78e" name="fence-agents-all" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="271f3fc9e17bfb532f6e3fe084c187eb5df39fcd67e124e72709e6371e903bcc" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="bee039a71a306972072021b8e6fc90ad0e3eec31bd6f97f10dbf8ad636407730" name="fence-agents-all" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="61d24e7d42a1c909455082f222a9179206dbd95ff42481a39ac920c13ad788ec" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="cb1b57406c36d89d5d72ed57a155f62dbd6b9d66590344d6e4554e8e2b8dcb0e" name="fence-agents-all" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="d28e08d3124b5bd2f0d995da93b8c8e4e4ef57e73eba4f3091f68e6d9f98bbd2" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="7403737db4a1537e8f5eb826bf04038929ee8e085c4fafe28e849b0a4076e79a" name="fence-agents-all" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="96cd13609f62471056628d446586b051abe8dacb66f9317344dba88e2eb63d47" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="ca8cc632ac9cbfa0ae69e1fa1c416d1c6819d39a27f3a7ee4ff3e113c2025418" name="fence-agents-amt-ws" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="65a2396c36bba23a9bd8488a51f2fa423e3cc2b22022ec15650ae71eb2888f78" name="fence-agents-amt-ws" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="c1dcaff28aa2a23204a14ee70a878a457ec69404f9cec96d736ddafa6a3df861" name="fence-agents-amt-ws" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="16601f9d03f635d20ba1676bbd5f0c8393e695124017e588fee21c42e5c7d701" name="fence-agents-amt-ws" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="b986bc818fa47a9bf65ee708151ff3d2ed0ce2667ad083ed85dd47204bdde757" name="fence-agents-amt-ws" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="ffc041e8b448da4520cb13f46d9989e5ab3fab168f1396a231e7de1a04af76d3" name="fence-agents-amt-ws" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="6f3ff08da1d838c99a5fd45b35af3eab0da8b272a00d14754c3a63a4497c4914" name="fence-agents-amt-ws" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="678f8cecb2ca08e13a719b572baecd3a19181c77d5dabfe684a140f75449ad4b" name="fence-agents-amt-ws" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="d57ba7e1ce0fe8c4bf0bdcb2e1a4e2867f010a9bba68b766a4df92d603b71c1c" name="fence-agents-amt-ws" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="28fecbb49635f7c64966dfd7f4626bc3a7717a35e194bfbbf167836fac2b8560" name="fence-agents-amt-ws" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="4fb7531718ecec924a8e4740495528b5ed84e7179e20eb40ee4befd6b05633ee" name="fence-agents-apc" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="256e662af76dabdf33f19693954cfa7110761b8495199411c35d77aebf290f0b" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="474257314f1ccf5c545bd8330f4a728e019ae5a2d3a9aa4beb3c2cf0d03dcc55" name="fence-agents-apc" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="27ddcd1af48d7a86a841d9cd3d1d78f9c60fb531a42e33e964cdaea45818e9f9" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="d6068afc9bcfd421bcdee60399ee96f89758c9cad8b85b48f6a769dbcfef9a62" name="fence-agents-apc" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="d9005c71f0e1a686881c72ce97bf1601b125c3a6636f819a26218d7ba0ebbe6b" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="7909cfb7c95d89e6c7a83dd8f268d08c61b041b6bef6b7331a69a3a42dceab17" name="fence-agents-apc" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="da7337e48beda0c5e9c489d9690fecbe7c3af75cadc8b461b1deb6b80074f98c" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="b873f2366239b646fcf210c1ae6887de137e6dafd63d775e9659780b0920e427" name="fence-agents-apc" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="d2fe44730d6d0edfc15b6da6ee3d8838f362488711fef87c03df2f2a0959e9f6" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="7b54192e37d9c7dd7dd18ca1075c42ec35ff72d2ab76a7b2498f5e402a9b9fdc" name="fence-agents-apc-snmp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="38b6d8cce19c9ab40ca85e4b0da5321f68e7610d9855c0a92c6ef15d25b3b8da" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="68e11fe2dc36285fb8386729358d733aa2d6c20399cbb6bdeb3f380f4ae592fc" name="fence-agents-apc-snmp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="0791f09ef3bf4e320371f88c1f8b916271f4e839749e00f31457d54443e90853" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="b5629cc4f74dbe53b6f2dc629a0120eac649b85bad01b4da272ef1b1c0566529" name="fence-agents-apc-snmp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="c2f60f1445186e14d3d13327c829ac262d2e683903b83b4edcb0e5bb99e9b1bb" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="4827ce17544cf3ae08f92c0b83b125f1ffb1d412bae0921359cd1fe2326b86c8" name="fence-agents-apc-snmp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="986c8ad0e127ebda234681be2b216e0c6326053ec58c92e4e0a409de347d36d3" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="ad824ea6ec36945ff97095032d2a75600e388ef31ffd040b013b2dec637470aa" name="fence-agents-apc-snmp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="22a298f9d0f1b6a11db8661d44bae0e9ab22cc65411e09b223f5213b5b8afb38" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="5121638a4380dbad445d17dc6d29e11372f15b319c6bb35d28af31b32ed2542c" name="fence-agents-aws" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="0bfceefb89d1ef6dd342c79da6eaa20193bcba70c7b6a3389e430a225e226f55" name="fence-agents-aws" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="53df423c7795ff4a9f07a9b89fe2c30d69ff4cc6b2693fd3348a555208287ed5" name="fence-agents-aws" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="1dbd4f3e81a0404013c10481355cc8ecbde3d64b5f3d6f2c0c9074ae331684f7" name="fence-agents-aws" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="2b3aae473949a41688841fd3974ee0cbab9e3d08b347749d6b3645ff4f9e8664" name="fence-agents-aws" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="7d26bd660b60c267f2e0638d050668bc9877280092cd761c4db97d4ba78316eb" name="fence-agents-azure-arm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="1882c553feb1121d5972996ef2eebccaca982fa844ca53e30de540eefc257ec2" name="fence-agents-azure-arm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="43601e25dc8a811693260eb2d801f2465a1a095500c870cac6ede857b3ea3b3d" name="fence-agents-azure-arm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="9cea2f4841ca8dbcec4df723fb777c6f0bd1e6107ab4b7ebfa2e21f3c75f9986" name="fence-agents-azure-arm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="6fc165ec51fc68f65786710ba474e830494a7051a61091df1614dc12b0aadb29" name="fence-agents-azure-arm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="5956775536f2a8f1ea7643a8d76e48d60a1ce68423dc8e9c8ec60e30ab7fd992" name="fence-agents-bladecenter" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="a841c97afcf0b6aae79a1ce6be52a54b561f9faf774df2baf3bcf569d7c6e1f8" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="7c5afca38a30bbff714686bbf3269d16a38fff5bcb3dd09b9619177c35c42cb8" name="fence-agents-bladecenter" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="7d8d4a604f95ad2846dd7de426db95c1a7ee4638d237084a3732524d93adeb53" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="55db601e3a012a3ef213d0753d3b13c970d559d66a9d937c4da9b2122130b5c0" name="fence-agents-bladecenter" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="4fce232dd8187739e07d085891628922e59d81fe1c96bfc96f7ba713cec2fedd" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="3ec0fae24a5cd3e6a51922409cf4e7f566a7038212edd76a2039d48aaeba932e" name="fence-agents-bladecenter" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="393bb2d6b2aa51edce16a606d7376288c1388c7e73e12febeb5f985a7c705335" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="61a6c51657050f94afdd2a893379f11368ee58121a0019b1330950f888bd5918" name="fence-agents-bladecenter" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="be8ee42df53216af9ae4f18ca9528599f5a002257d980f8f10d997a7842a35e5" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="2631843e23f9f1340825e233dd46b5e0b161313f6c667e3a644cd480891a4f4c" name="fence-agents-brocade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="7737e4cf7642ff3169ba15b4354d1d6f7a991700e16f1d0115ad9cc91db2a1ba" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="e4a76d5305fdd25585a90ea07e5032fee8eb20a323685c388e82e8119354a40a" name="fence-agents-brocade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="4f17bcd1a54ffa96311879a28855fc1be63da637569bed9c52b53ee2130201e3" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="8606672a1ac30e8d1020a8efac31c3840e485378371f1e924ad6ad85df0eef06" name="fence-agents-brocade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="b60ec11f5676a436a25e88403e3435ff7e3d4b5cc5dc2dc02ba9ba56976d34fd" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="208605d24f2614b32c3cc915ebbc32bc7cd61552b6c91aa97ad65600e225eef7" name="fence-agents-brocade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="5974c7da6098b3e0b2948b4fd7f9859809f70d68e31a60a183ca8967e15b8009" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="70c9d955d156bc74aede0b47ab5e4ef2dfd500c1e445d356956a5d78c028a7a5" name="fence-agents-brocade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="cb3b3ccb5a5492768489fe0a26c49047b564469b61eb31d4c8d954ff07f2b001" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="dd5fa49b8e49f8a8df051a3d7b3b0ab639775907cd867baaa0f0d6f42ce5f91c" name="fence-agents-cisco-mds" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="60f171a50fa1120908c82f163d849fe2952a2207ac81cc8dc6808f676e426be9" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="bf497bc9d6ff4e5982b2bc8da24fee9bdb0ac6c5df5ec9b2dfea602b511a6b28" name="fence-agents-cisco-mds" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="35d03d10e46671722226dd8cdf111274bdfb2577e435f9c498a9a48dc2387065" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="fac223139ea9cbc8b42d148d2c084029cb967e40a9a5ed3c78e325823d8d2c33" name="fence-agents-cisco-mds" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="1845797859d50fe69bb75ee9b5bd4903741f05d1306ad572aa9933030e2b5032" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="75ac7232c69f2f39f6230c7f54e3a654dfdbfeff1094b7776a56519add8f8e10" name="fence-agents-cisco-mds" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="362b6d38bd05a426413f2ef1a41b2ed71bfab8b6cfebf503ee6f0bbfc4b62104" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="6bda1802ed2d4e437193ce0c143013b541b496537fcac9adb5451e9fcf5f3680" name="fence-agents-cisco-mds" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="691c28c08392d53154ca1c7c2303aeeafbe17dd5ae62ec1e9d276046a9dd52b9" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="49105c48be9d8e25ece20d5e0b326c2bf23913163bac2627d5e7ec173ec653c5" name="fence-agents-cisco-ucs" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="9155b7b9a5d4d4dcb5ae55f19e513d4ecf1bf2a4dd7a2f06a166d6614379e3b8" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="b2f2bb6cc1b920b86bad44e3f1aac2e49127680a669ff6d2f2c8779d4ce6c1ff" name="fence-agents-cisco-ucs" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="515c61e34a7af7f1b8d4f6805b9cd6583795d432fb546807a9ff2c07dda671fc" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="dee06844aed79b7b5e6a2ab2e7895a1eed6d02cffa2d276b9beaa5874de195d2" name="fence-agents-cisco-ucs" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="2c61aae4119f2721461722263590798c7572882db5b8e867bf99a0e20a5fa324" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="b34d821f5d37dff6d1fa3f67ad1569a35a94674cc5ef2d5b348dab6f9afbd981" name="fence-agents-cisco-ucs" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="958913100e1bd26da994572c288bb5f8de55daf48fd1e16f0b9c9461e35982f5" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="d77a8396d5e1c77203db2e9ba881b90aea371fb42acaa438d2d3953fba7eb8e7" name="fence-agents-cisco-ucs" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="4c80d58b791f32f8022ce82680fb44231ec37ebd9d899901be5785b73cf3824a" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="fae76e47a9c52058e60797da6cd8bcd795db3f48fee92cfe47c11ce784cf05e7" name="fence-agents-common" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="0cb4c8765dbe185ebf1d02ed31f1278720a5927d77d77f5aed5083ac5b33b493" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="fc67cbf40b41f971f011a47f7eb3cd1bc36efd8df4aa08f880f1eefda8f8e47e" name="fence-agents-common" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="4f7d54ad52075fef2c08207c9f38eb244e8d78761d660d103b7e69f83f0c11c1" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="7becc4cf49c401d8ab921876e25e8104a6f3c28f1a379e8caec47b7758f17d84" name="fence-agents-common" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="e8556a928d18fa39e52c221b03c779b94ed760583c3cfd9febc60d3b33736756" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="7646dbd27672df3727c18e0609a93e1a2c32197136b85093b9a5cc9fb6219471" name="fence-agents-common" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="f13aff425481f0dbc142abae06ed19ce73dc600d0bf0eb91736c64919ac5d45e" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="42531d117e462ff35bf35cf7de6806477b6fd7cc8e0e7797f9d35014e884742d" name="fence-agents-common" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="2bf713440eb0993b998d7347e0b9481c0b51714e97c0cb29ba7d01af7549dbdf" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="a77583c51aef84078b5cbed2cbb7ddc92fe59527a8e5a1a72a299bff547f37f2" name="fence-agents-compute" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="ca4b29f0fce59ad3c7926b865e6c98f32efca780b76c436f0282509b8b134768" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="f0354d11303720b97be1c871dab38048dd6c40090f23652a3c3f415d39b4773d" name="fence-agents-compute" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="534d1bd18edb32f4f465aed4514f240f8ec2377d5d97a605cfa993afe75b162a" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="9c46c836366bb7ad5082f4e476f7c1139184fc789b232d46631e75509e2f3123" name="fence-agents-compute" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="cbddddbd12de2910bcec71ae427e0d5ae562b9ed1d7ac5bbdada1400f66ec5e5" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="9b9694b50bfc2d61efcc3285d39509a1d84d1fb32ae7d6b0eb7ddebd3a1c0192" name="fence-agents-compute" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="7b726480042ac6461ca98ab69ca262e5dc9c57a552bd54d4ec9847af5a9c55a1" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="83d505d67b1c07de5ffc3e5048a99d4de9c126b7e6822cebd9ef48c81f7f5ba0" name="fence-agents-compute" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="48bdd60d471b17153de8c1989267900272f1453d79f089ecee62766dcbf3a8e6" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="ce83ccf4b5185077c8e2a3301bdc8a532f362b2f97c8737210d3f4ddf38edf1d" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="126e2df562bddc04d2fabf84ecb0707700be54d1e606d65c69e3d82bf606a7aa" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="fddbebf41c5cc03e8f01184078f953578fb8a402ab5d26ee29e9be0e46e508a6" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="e5adf00b9e40203725a3559cb346a1f38b7341379feb042096185a26246aaeee" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="f093276fd7e96672a7af093ee059da1f3681aa94ca1773a7d473351a4b61553a" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="de13eccd9349dd499d10cd2a697e8357b865991c8c9b00b445c6a72495753481" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="65407f0ce3cd1ac8daa105853d521b30ee3913a11064ba18fe7fca68dc691975" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="68bc7b20c7870adfad04bd1510c9118305eceaa20d912a2de01d422d0d7f42fb" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="875cd56154b6302f9cec95272af95ac3c94b04d28589bb665b27581ca2ff667e" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="411842e2d5073331f2da7d32f01c190baaf00d71bc96046806384a02d24b2d05" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="3922ccd26252beb924d92b58099601cb4140650a0d37e2998529a45cfa619d04" name="fence-agents-drac5" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="a38b8e5f1af547984c7394a95f424d22109ddb9c939ae54b4363d5229c2663da" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="8440d9f09f950c442c50dc70f0d90a066a5709450cf3b30b39376a665b2e2aa4" name="fence-agents-drac5" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="0f1e835e36fd4714e50cfb0d142038802b18fabffeffc42e912af43ff9fa31e1" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="39a1003551839a2b2536b20281cb5a02b9da220a39faf681698dfd3449b4db7d" name="fence-agents-drac5" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="f0045eb6a4d023cbfebe70be55330795a48a596c6d8c651a590d696fcd4d7bb0" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="3474020c36982823af3b134aaa4a5776b04b20d17fc9bc65805492278a5b6956" name="fence-agents-drac5" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="bc140edea78dcb32f124716e8c6f79948001042cd123f458aef5dcd38034591b" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="5ee1f38302333e47233569ba38b67e4c4d7c01a172f2f4900f4eb87cc69ebed4" name="fence-agents-drac5" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="ae7a1ddbadaeced8d820151124591128e5a46dfb957024bac779b39d0a68ff84" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="ba3bb80e22f8bde80c7ab97d8e1ba4c338edacf0ffbb2915eba2deb11e2d7520" name="fence-agents-eaton-snmp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="225d89bc18d75a0dfe3ccd5f7956e76a970c9ef98bbaf8aa4e6f84e7dfbb5ac3" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="af4b61509d54abade5221380c69f895a0c0f2e90952526744e2cafa84238d282" name="fence-agents-eaton-snmp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="395d99534f8afb9f14832a5bad2676db228b0dc3dd57c23ce658d75eb174d21e" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="e25f4f48984092fcff0b753e2ff318bd35ba238928b12a545f84a59f0b2fa237" name="fence-agents-eaton-snmp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="a4d0e08b40c4ec518b25f902d271fea98fa84a38861581f7cd50d9b5c0b71228" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="3604d826acd5a3ba5132303cdf113d29267093326f17689060ac9f986dc66aad" name="fence-agents-eaton-snmp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="af1371958e4c93f8ce3546bc7edf83c6e91ed6ece0d9c7794d710be47a7a4883" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="6773582baf423053413cae9b08ba7a6b33a1485624a9c5bd234be30e7ff473a0" name="fence-agents-eaton-snmp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="faf15034486f6f249f2b0a1ece405b2b00bb981b08039b3166417ced8e962bc6" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="7b3dcc6300cbd6a54d81cbbcd1b3b479923702cca76c060db1ecbd32a3ac9775" name="fence-agents-emerson" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="01ce1c973802c2a0134428ae6dfd9f3d28f0ec25a74575dc777d000d45875ab9" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="2980c4fae5b5b4520622e1112f6c8ea6d29279385764830f579f6a6c0f4fa8f6" name="fence-agents-emerson" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="bb3aac913abf14144f73726fa3865158fc926b7ea6f5289195bbfe784de56ce3" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="28b0da3d9e17a73a47c5f60b77c989d2ccb4aae09df619f856e5af524bf1cf4c" name="fence-agents-emerson" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="53421632a34578d44fbb19f55d28a1ea4ed45599ab511e0abf3aec6a10aa361d" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="48944e7b9004848f9a4ca1cf45a28cbf2ddb0972b8f79ebef0f10c9331b3577b" name="fence-agents-emerson" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="c77065afbbf79cc04833b2e0b582cb06250b1695b20e037f781853e44b6a3bb1" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="7dc16be4976b187ff9990380eaecda475aa152ffba1e9089d8916768f704975f" name="fence-agents-emerson" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="8d04a19bc97d6b5f2e2ddb4def323c8659c1d983a552cf657c77fb8cd5f64e46" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="c0c1de83ae4b1942c2d34d744108e0100aa548ff6535404a362a4a22bcb9b519" name="fence-agents-eps" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="605b6a119ef20602466df72b9e614e7cef6a95d0f0b0ec606b00bf7e1920619c" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="34931cd84c884e3e6dd08177d3814d09da2da291ef9684844df7b72aae03d05b" name="fence-agents-eps" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="2efa90bdc73bcb71459f03ec0d82bd44eee41b9f6faa852ec383ac04b91f8266" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="cd984f0e41d1b2a73db754cfc37b769074c75bb12a7d1d7f5b5c53bfc5c31d75" name="fence-agents-eps" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="18fdbcc72eb619fdcf00bc67a1d15569f24cd7acebd1ee88f716cb03e8e45f4e" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="e19139e0589fb9416c6317b984022b3a678d7655423bac95768409e80fac61d8" name="fence-agents-eps" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="54c45e61062f9dad9aba8e1a816e70325621a6faf9d3cfaf76224d78b328c929" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="740ca5f40f117a87f88edee0778ada2122a197241167b680ba136909972923cf" name="fence-agents-eps" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="cffaa2183c9a05e6aaa0ef5984f452c387baf6165d3403bdc49cc75a51c2f7d0" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="caa910340a2ca775a33f9f5de56e4b8fd4cd10b66ccaa43c91902b28177367a6" name="fence-agents-gce" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="2f85e9070e2eac04bfc5e77d3af2818d8d6288554c9af340ffb62a2b5567a9f9" name="fence-agents-gce" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="e6b5c939aa7c60678aa069c302171b9802ec3aa2e7e624f3689afe88f2efc0b8" name="fence-agents-gce" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="224521067122912c609fc1cbb1f4394d8381c82924dd88731dbc4e84ee28be22" name="fence-agents-gce" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="3732ce8c43564ac68df2e4530fd7009883911c678e8632156b49cd998e92b8bc" name="fence-agents-gce" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="2a982ba63f6f2eb9f3a7e15dcc9f1e45890f84c8467f5ccd8e9cb6326262226e" name="fence-agents-heuristics-ping" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="4422983e2daceb2070198df0ab0dd862416fa1ff0ffb7a5f7a2c7bde7b25049d" name="fence-agents-heuristics-ping" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="553920c13656d7c55862c3aeede8fef831def0ee57ba2230b23f36dcb9539ff0" name="fence-agents-heuristics-ping" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="6ad938873c2f7332720a227f9b9cd9983200b34adab44b0a236b1dc15a5498fc" name="fence-agents-heuristics-ping" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="c2a89912ae5d280682b3e121d93d002326eafee94e8b83affef56e7a3cf25849" name="fence-agents-heuristics-ping" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="88648aed5fa57dcbd3d9149d77e12663f65b5124710d5914e4ddefca1fdec08d" name="fence-agents-heuristics-ping" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="7314c299b3e5c59db83998986fa2793152c6fb3af3db95e8da617b1da9c9bfef" name="fence-agents-heuristics-ping" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="8b8490ea01f18c545fcddd9caf9fc213678f970a04fb5b8203150a68af7f45d9" name="fence-agents-heuristics-ping" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="d5a0bf4cacd588debded724e28bdcedf9961e66faf736e129d408fc3c9e37aed" name="fence-agents-heuristics-ping" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="eef60f37e84b7e09b05f3dc86a6e747c7a607d463480abf02ec17325e30b57c7" name="fence-agents-heuristics-ping" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="0962022c2cbebcf2cbee254962b1742f4353f1ecc53a68b9c572a684d7049858" name="fence-agents-hpblade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="a3c47d33281fff07c7debd91104bcd7ac5965274804534a1408ccd680f9c1a47" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="18c5fb824e1f832ff2fbc9a8945507599c94d46be490f3c143325afea09429a3" name="fence-agents-hpblade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="1cd3a696c656d5a3fc4d3b96ba4f735661444581425aed16abc017d5f921edd8" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="4257e4593cc3fd3a6904e063e32b5bafe39f6010ffc0568534e83f41323bb4af" name="fence-agents-hpblade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="f50d2aedd3c8b5094b7084f28425199e912e39e4b88a150c3b91647817787e9c" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="a9040a30e204a4d52f7b2ded7b592f2c4f07132be04354e1b7bf572a2748ff2a" name="fence-agents-hpblade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="4a11f76ddb61b3572517acf9f46272db1d67a5cca9eb4b5de906ad95a4b78b95" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="f6139ff62193e31df4245bfd8ed4f994a6461d39e9c7c4390bacc2a746621e47" name="fence-agents-hpblade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="470ce572070dd809259178ccceb93fbffc7c5a1cab367eb0cf18f33173aa0efc" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="fb5bc34a6615c6f9aca24764e9252d087d8a95b40351d1c28341ca773c20b30d" name="fence-agents-ibmblade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="ddc17dd55c69d3d6299c668a087fbb24dcbfdb47225c699a77f550b92bacaef4" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="1c8b86a9228a5a5c2e7f451d9a417de0c98a82876b658d5d7744acb22bc5aa5b" name="fence-agents-ibmblade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="1884cbb9d8440181448feba6c3ea1e7b22c9bc5039c0d71beb34b886ae17a2ff" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="7d8d2a7ee427be4e603ca9bbc2ce044860eec524c1356c0bf1e9025cee5e2248" name="fence-agents-ibmblade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="f0f037fd0d47a8b58992f7b8a3d0415d328c2705c70384760281f5b5f5c3d05d" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="e78461e7f7962827ca3d5317ece0c3aea4abe7827947b521d4d2b86dae3d6319" name="fence-agents-ibmblade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="f6896800971c54a0c9165b55f76e30a94170bad05a823362945c594854e2d280" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="cf299af677925df1c78b83a95b68e460a24f8db45453efc9b2eec3d4a261efa9" name="fence-agents-ibmblade" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="2b82396757fa08468d414e34dae7130e9930092aa124f48a026f0191e11f1aba" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="c3dd3c75e64663b155542593be42846ec3ece4f54d600cd3213444431a6e392d" name="fence-agents-ifmib" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="7482b51d383568648e0b1aec54229302e9fecc0de00169bfcf7f7b9314cd597a" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="ff17913dac0c67229d5e2f4d79527aff0f298585703969ce5deaae12430693cd" name="fence-agents-ifmib" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="302cd3bd27c4e6330901ea6ee2ceb2266e76b003667371b9079598c922bbf380" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="8a6bb5b1585e8cd8714dbdd5269bd918db0dd68abbfd1db83d65ed85db465259" name="fence-agents-ifmib" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="1f298ea26d3fe3d47a25304f47d19812ade801116596c257ab17c5afd70b95fc" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="034373dabb1d6849e778dbac76da9f091be9acea13c3b6112874f4389472eace" name="fence-agents-ifmib" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="737f834803f17c0d226d39637081bad274b8aaaed28922cbfc17460f7139410e" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="773e521ec572ce328aaad9ed50f7e1707a0097828f478fe78dee5bb0c07a265f" name="fence-agents-ifmib" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="227d02fed7104b89230f524fc4675c20b2eab309906225dfb41a300c3c048a60" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="e282184f75124bc233aac56fbd9c7a6102fc179a2617080258122bbe768f7580" name="fence-agents-ilo-moonshot" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="bbb6ded77af2e4ac4ebd8ec689ca6d456cf3663ae903d66045f3d8f923ee9569" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="2b33b6b84875b86b7194056aca07355e535c4b2fa0692a9e2757f8c9a42a2e5b" name="fence-agents-ilo-moonshot" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="4e8a31fe99b213c3356033a8587b0bec3217c4bbe681ecdb0b175a83f3f60a7c" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="254668a3099a5530f1cc9a117fa56404026bcfd38394a74416c608ebe251ed35" name="fence-agents-ilo-moonshot" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="92b218d375ecb2b52aec960b52e8e63f174ff805e4aa3e80e6e79a9e24b66aaf" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="54a2678e027e7d6c95c2307479e95015106845f0bd8a0d5b1b8dc3d071e0c7fc" name="fence-agents-ilo-moonshot" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="7f2f741d221e5906815c871b378bf3fe67c507390ede7e0be45becd5b610ee9a" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="95c0cff4f5a04e4a90d74b0a1b2384d87e2194188edfb8ef4670293eed312a92" name="fence-agents-ilo-moonshot" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="967a527f7d3e25b26d6551025cf1440d29483a03cabcbdb5964a1ed15cce3e65" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="afab1a974504a88e0b067f99c5339d1c886ca62f52f3b6b92c1c0ababec3430c" name="fence-agents-ilo-mp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="2ec319b2b730dfb7e6d155e57b4a16b8aea3b19d31bd2f2e492c347b3ed807e6" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="5700fdf409b58016b49b83f204a16570039d138c71bf69919b45b97600a26a16" name="fence-agents-ilo-mp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="6816ec3b0b3d815b8bd31d97194a3b0c51cdd8778940bfeef8058e3685a98bdf" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="f5c8719dd703fcb9b474e8e46c669b4dd2e8ca1d25cc0e900f43be1ceb0ed6c6" name="fence-agents-ilo-mp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="b31b23cf17c82b32b5abd45d48cb80db7b88ddca3549ec6eb3086422b0f18d5b" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="1fc85d705fa7a07409853fbc0b5f155652714a49b487d43a69dd28be94cdbcfd" name="fence-agents-ilo-mp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="b4853aa97013bd9c30ffafcc0a5899ccbfd8f1a00afe5082df6bcf2ae37f7ceb" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="e1a6942b69158d963b14ee01460229ac24f69ede08a433888aeb4e1e7bac872f" name="fence-agents-ilo-mp" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="f1ffee18d0ffd42771e91485233af102048b19d65b185ff69c5be5bf691bddbf" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="39b9a28e9ebe576750b799e87ba164337b0890f64adf438f9114ad0b3fdc8668" name="fence-agents-ilo-ssh" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="edb5d15fbdf60586c4784f0e1900ddd0ece4dfeb76bac18f09b5eecb6da2c12f" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="2584f1f093ea79c2693f69f087d4bc743c0dacf4299b87c559b357d7654fe262" name="fence-agents-ilo-ssh" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="12dadd460a392cde57db90e838b9f65d32f9e021bf8740a5ad46b6c167ac700a" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="898b21df1e8c7e590461471742012d8ac6c498e3af3b40874763423dbfde9ea2" name="fence-agents-ilo-ssh" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="3ef2d1ebbcf7e69b11b3a4e8fd0e8bc5db0f022bf652c767f33d46a5d439aa7e" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="17203962b999b411992ae360a39d91efa64ba6e35aaad8cf6585f85b7f0b489b" name="fence-agents-ilo-ssh" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="b3c45d124e7258c81139605d577896aca78b96bf9e3454efb666a596eeecf953" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="bf9f36215d3a4568cdd70ccb49a159522d68cbc76f950dde520dcf1a1201fc16" name="fence-agents-ilo-ssh" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="5f4f7ee1be1d3fdea911079586e87dc94d388593e8456e430c5fefd5390536a7" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="c1a30e6970878b2805b5ecfa90c53bcdcb52c14bf34657bd766bc32734c28d7e" name="fence-agents-ilo2" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="6a204476b7bb5a03f7ecab2ff749427f23126f3715d3450c3754dd452fcc3373" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="84fd41e6c98867626958effc5322be33e07e6e9c98381201cfb17083e1947095" name="fence-agents-ilo2" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="90e6bb79847b4a920536dcb7612f4b2dc4acfb4860754fc68ca237924e5aeca6" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="36a545ad4f8a7880451fe4f7fde56acd30eb6d049e4d84aff4a5f82b7e5af627" name="fence-agents-ilo2" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="b04e2b44dd55d2bb254af04ad38bc1d1bd8fb220a69911b53d5800725cfc5ed1" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="0842430e37091e48969ca4193b2bf3f576afa3d4919c99cbd3983056fa7b737d" name="fence-agents-ilo2" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="3125e9b4a460504284eb08d1ba39ca82d5aa86c416b65091e4012084bb4d99bd" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="addcf27945520cc4b3aea9c5c8aff569f41e7cd7474d6917d25148da45fb57d4" name="fence-agents-ilo2" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="21b88d3b72fc1610dba337a08622d5f0a6bde30bc2e4ed056063fe35c1b0f1a3" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="a918bff7d8eb247213b6b92cd42828c29d6947b96cb4c83b2ea2aefd7fae82e4" name="fence-agents-intelmodular" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="3d5adb2a2c2eccb81a7910c2a030c021dc774c33dd3d696445dcad73c06826ec" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="6685b8fb8a6d6840679ab24a98e13220d3eae68e827f0376342c1cda70685b81" name="fence-agents-intelmodular" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="444455a30511ad777e2a2befa4fe478eab37d3487a9db9a6ec52b82ac3035e37" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="d90f4da9478faf37b92e1679700484718838b1b76fcb0527e5a1a49e7332819f" name="fence-agents-intelmodular" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="d3b00cc5f625470ea5c0f78d2d00c2624745d86ff625047811bbc978483b9c6d" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="0f605e32799d977a7aebf06bf5102c499d3799b6a65e0eab5c25a0abcfc7ae48" name="fence-agents-intelmodular" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="2e83a4290c9c90a11893389614d4ed901fa32bc7e34b95d43ae84d57e9fdb746" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="ee983a9e2073529a1d7ed1ee96044946c9f9e014bfc8f3b96c640ce835a2c971" name="fence-agents-intelmodular" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="54a73723935e2c821553e3e4b38238c8ca74a3d94e84e09168e5b5c4be91a95a" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="b21471213be9bb83b9f036736fc2d49f22d0539dc48de960cc10ed3ea7c7eed9" name="fence-agents-ipdu" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="09eed852a3f722f1a08b121d60a308cebc60909a94018093162229a601ba175a" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="52fd6822b76df7a33149f879eb8d14ba10fb5e3cc285d17e62be02b6c9c7418e" name="fence-agents-ipdu" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="36f7b7f44eb1af5b179a4919b378c95c27d782ab88c2fedfbe12b99e0fc8ecbb" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="db7aee17bb4bb26b36869844bf1bd84da5490166556572232ebd6614c0485472" name="fence-agents-ipdu" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="9cc5508db43e617a988d36e3743c84ed01a7599ce4a2ed29f4bf32b073d31472" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="23fc83571b134b9ea7203efcb59bd882ee214c7f1c80ac205bcd9fb9b43229a1" name="fence-agents-ipdu" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="129001c4c4c00b3e0e1ab9eabce0630994772f01adfcca5fd615b52389fbd359" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="fe4addd55fd3bf10f439b2bd2ddf0e09371c8fd311d3af17b68aa3fa516f052a" name="fence-agents-ipdu" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="30023290994e104d56ce552155b0c36cb6dafc41a9155267bf01b32467d7c575" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="78449cb72154af6a291d100df9594c345fd1292e716560580fed1108a51d477e" name="fence-agents-ipmilan" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="58eb0beba06b036c782be7add16234540b97d07141e16d939312439690552ca2" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="915a061cc350ceedb12e7465ab8ba17f8058c959fb72efacf81ddff12615a45f" name="fence-agents-ipmilan" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="bdc80fbd9d952c48b1345a4a560efbedf84f0810a87faf7c7ee95b116b30325e" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="49a142f32dd11040e59ee3f17986d29ca8e701a35634ff8bb30a2a85ae87714e" name="fence-agents-ipmilan" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="e8af6d2a0e43253c6d660641ddf30fcc35c308b38a3b80437ef1baa6c677c817" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="724b8db54a7280cd4d4cc223015cec651fcce9289061314939bc10ebe6df75ef" name="fence-agents-ipmilan" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="ded24a5f3d2c0dcec35c9144175257ecc916becaeba460847128c9a726a7f8e3" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="cb501b10c2cd0f9f0064e51b10537c7f338ca2123222d7364f7afc5dcdd5fd00" name="fence-agents-ipmilan" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="6f1bef9d7054e6abed1b44de043919110f3b1edb07be4af9eac69f79743c7552" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="4988c48c7b8d07db8f114dc59081e20bd57d9a15c3cb0d22270bd921ba5c8c2f" name="fence-agents-kdump" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="e4152128b17815146da58c9e5b1763a6ea923b30676bcca277adb17cc3c9c880" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="29c177301ad0fd7aad6e7cb380c23701a2976beafa03cd52a9e62ee2e8a58e8c" name="fence-agents-kdump" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="08e89871550c5f6b21c50bda9087fbb19892178c2cd9ee1d7a689bf277e8584e" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="3f1fbeb1882bfa0328dad3bfa9905069adc104fd2e19044e1d7bea4409b10de1" name="fence-agents-kdump" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="efb6ba43efdc19cce07861ab4129314ff2f72104106846a6c43f3f93ea7fc6e1" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="12111838ffdf5a991d49b603995b99422123af19c27c6991f53993362306d723" name="fence-agents-kdump" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="d1d9a510a9013f64b9f242d4166575da8515d01d6683e3c8618c41491ddf173a" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="5a1ed697da800cc49210ba6524166d5d97b6029b0449e287116bd0b3e7f0b3de" name="fence-agents-kdump" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="83d16e0b63fb4f3321a0001df1e8537843d1d2191037c4b5d85102a53815fa8b" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="74b29cb9d5107ead09cef496c7143a51fa8e6e69757143fb4b59b67afc44e426" name="fence-agents-lpar" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="be7f5855ae32c599c8964a5855adee6bdf3d66c344fa12b2bb2e8732491a3bf2" name="fence-agents-lpar" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="f2731e4da5af071990f2a9a49b8da1aefddaf77c6412ddfb2b0836030ea847c3" name="fence-agents-lpar" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="ed5202b3cedb351b7dc96b1bc1d8d1ad63ad03ac91afabda2d2283c5d840b1b5" name="fence-agents-lpar" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="0d63325807295252a255dc8608a65eb548ba06e5fb50e261c6b06a4a1d7a38ee" name="fence-agents-lpar" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="0cdddb6a11f9801b7019c83d58bc6c061c9a1e2b48c672dbfb3b229c96ed1ebd" name="fence-agents-lpar" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="5619abf8b7e91245606127c37e29cb8c78002dc2048a8632a1eaf001697c461d" name="fence-agents-lpar" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="04549f17a0b0a810c801111ab05f65404ef3a6cecc1e396829849b9dcafecf2e" name="fence-agents-lpar" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="e5c88973363426b685bc12e854dcd5f602e57895f8c13b13a79fbae8c621cd00" name="fence-agents-lpar" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="7aa28fff1f6f5843aed2707e49074485ec72e8958e8e54667e44b036125c42b6" name="fence-agents-lpar" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="236d5f624983454a1b32efaf4864169952deb6f0d8bfb09fec8362a6bbb4f7ce" name="fence-agents-mpath" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="e03fec5c9ddac77c741be1389c15f6a97d0e8e21752dffa1d8729f4f19a23564" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="58b3ddb527ccb3d777300e9acb85e200d0ef6dca476b017c342cf5a5a24b594d" name="fence-agents-mpath" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="c9fd72618ce684bdf4a7ae607c66f1e8a6510e6278e688fc7af1a0ce45217d2a" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="f93ec00416a11f34c75239a90613af991a8a12368d3ebe35f73924539976c5e3" name="fence-agents-mpath" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="dde39a0a6e8a34d745c3acb3424d3a08dbd0b3fb28d97c67bf6fe6943615836c" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="1802f6693d00ba5a19ae08168225cb008bba35b762e4cccd9edc74047e6a9c81" name="fence-agents-mpath" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="bbf74ea2c74cbadcd249c09e82f64c847b5f42757a363ae334b7a56cf8892a85" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="aaa58234492628dc1994e77dd60c909b2549bb62034069562f4b2678f5332565" name="fence-agents-mpath" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="293e2b5abdb73e0c1c8ca75075eb6758766a104bf6a4b59c2923843285fa5f54" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="f5bcddf5a0c9e855f1d96aa89abac2bab6b670ed14d8e3a4fca7e5aba73fd542" name="fence-agents-redfish" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="96a125844ae3ec2ab973c56e89ff1acf2cc27d8c230d0eeb1f27222423fa2295" name="fence-agents-redfish" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="85a3b20756420085af0a770bc09cd15e89cd204bc50ca58c75d0babf09189836" name="fence-agents-redfish" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="53044ea068c8224af9ba75878b6021f271c8117a9ff3c36ae4f4f2feda632f98" name="fence-agents-redfish" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="9fc8d2e73f2c5938988dbbce91bec0ab642e23354d50a70475617663647ef113" name="fence-agents-redfish" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="c7e66ade4185a8644f9d9520f228179824204d879497ce61d81bda5e7b5aa423" name="fence-agents-redfish" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="de1d449ec43b0a946c27b9daa58e089bef80f4634bfa7661a27cc57d679749e9" name="fence-agents-redfish" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="03c8bb65b3c68c9cfe74e068ba2d034c0207dc7e741117e77c3585860892bbcb" name="fence-agents-redfish" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="416402ed4696681727e3b841fd0cd1490998773ad6c25263d7dcc468e3fec2e8" name="fence-agents-redfish" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="d5fbfaff65359f4a3199cfcffc6d144ca9294963ec47b0b6cf9e30774dccea9d" name="fence-agents-redfish" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="c34c807e69d158e35e7d6936937b144913a92450f271edae0c46b1d95e429d79" name="fence-agents-rhevm" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="a576ebb44eefcb10da61b178a52128e610ddad6f4b7c2268cbbbbb1e9e153313" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="fff603ae106324a41ea847a5034e21075dae2c7035abe59e762d1796c3684212" name="fence-agents-rhevm" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="ce0bf5f651cb8e635950440eb4636972cdc881f2c3e6c440293de8286bfd4fe4" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="6c9bc2da96f4f37906cc146435e3984468a9ecb64381266eb320b5cd39f47a50" name="fence-agents-rhevm" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="eb56ab17de03c1da2fb1360b42115c7bda8b101cb9e7c206569f1a2477cb6256" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="20a8fb26861667517df43f707376ee4d3eab755c3474911edc468cfff82cf100" name="fence-agents-rhevm" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="000b98ea5fb6ef8858de23fe23b3592167fde9b614f9673d35dc4cc72b710c83" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="e2c41b13b3c1ee22d2eb9e6e622e859c3ff98c62b9b91a981cf333073a77d1e7" name="fence-agents-rhevm" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="085a0decf6ddddee5c69013d1badfe0036d25056e70878ff39171c922df2ccbd" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="679b51a2c17673afccb195e4b92a927c6297b628247d95397698fcd5f71ffb12" name="fence-agents-rsa" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="3eef64ba67037d2be0ba35e69d3ac807c4e16b8824ab85649e17bf728fbf0668" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="e5ec7f7969ae2ec559ae1757ea0f70996e8a24a49b2a0d3a29e832ca42e757e0" name="fence-agents-rsa" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="6ddf21f60563df3926faf69ae73ec6338ee6740ed955f39a1c6198378bc182df" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="c73c1730a07c1d615135e09d5622603457bd32cf3eca31d77cac16a45f16a56c" name="fence-agents-rsa" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="451291ff06cfeed701f34ecb32e5e693e5a9f938fa9e42574c17943ffb68d19b" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="8a189c7de71e6ef25e7384c024bc9189aabc718f32565c7860d1a7735857245a" name="fence-agents-rsa" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="a1ec43bbcc5a9fad7528b161b51d99e02a4a0d4ca14ffa4e194d7c2e33fef869" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="60f1763dbd146c51ea999bf4480a8ffe9b322f0d6c6483b82620458a46271a56" name="fence-agents-rsa" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="3bcc65ce26153491383782236b8e5d99d9b4c3b5771dbb620b11c599412662cc" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="f2f9c2176fd974e9b898ee06c1db750bd4647d4a6ecd578b2340cf765d277ed7" name="fence-agents-rsb" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="1af5f03f55ddf92726bf28a313ce4709d5d36051ee0a6799d778a5fe762b8982" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="e0faed2dd852b68ef16ca28ae7a98b5c0201358793bb959802a0ff60380f079d" name="fence-agents-rsb" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="9228683301303ad318b6ec6411592b60dcd97cdc2a4bbe8f3af474daa621bb81" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="07134a1a0974e583747f37a244e5577e8e2142913de96aab95d0b7d8a0983b7e" name="fence-agents-rsb" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="1b183f179bbcd8161d4dc178ec656a929c33bf262a3ab02587442097cf18c527" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="d2fd421f50eddd198e2cd1d754fcdaa4ea03efb91320d6b89da77d2c138e9871" name="fence-agents-rsb" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="c14a2b8bb04ed12195560a83230be933ecb10d7b7c795e4411dc4ce2321bb81e" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="f6199b2e8ba12c2e08f2187280670fb6e459545f61936bb03516367251b8deb5" name="fence-agents-rsb" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="94beb6b16f7f2137b0c0328f99587d3ec55056e2f7a21b917d42e6c5917b9544" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="0b996613262faca1b73c40ddd3e57449f960880e6a1f0020f9ece6ceb398cd8c" name="fence-agents-sbd" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="a9634f8eeb8eb23166321ff8a0600fff36136e53f2e08fa570eef4f1047682b5" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="cde1507f193a0edf98ea8b502fe2998933046e301cb57ee4ff81ed960d69f81b" name="fence-agents-sbd" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="4051bd0589a70967104b83c243e946994eeaa43a7cbd97a2ee08f760d481a934" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="88644bc9852b2bfdac4c7bb9a932f3cb07ee36685de4d594240f97ac97aea6f4" name="fence-agents-sbd" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="6ba260aa1fe67d927c630bd8016fcabb4d17091c7712f084069faf87069f2800" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="1b0a65533e8b6752ce114168dc165dec2aa777e4914221cea84f4ae683f91df0" name="fence-agents-sbd" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="54d536b630074eb28c03178708d5032dc5093a7b78f987221755aab2c8dec80a" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="6b50dae059faee9ee5b00ee661d4ac02ddb20688db9e40b1e45bbff41cfbf25e" name="fence-agents-sbd" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="074cdba2a8a3dccb12f6b5781b094c713ae54e894f25dd19c7934ec8b95ba7fd" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="4bdbf306508eeaa5a39a94f15860195ce355c48a5b0fa0f15b7d32b7b44a028f" name="fence-agents-scsi" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="044be19d3480664176913cd5341ac84b976bcbe0eaa502701fe1bfda46be8042" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="59e47c73feab780d06df1b3635480487008dcf9649c6e6abffe208d6ff4ea7dd" name="fence-agents-scsi" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="45874f8fad680c478af2544dd8c6b7d71a61a50152db1358cb572296d6284cc9" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="69f02d02f4f3249bc978d3b3cbf62dd04c42371fbe51784c1abd12b6aee87954" name="fence-agents-scsi" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="16aef60e2e89f53eb5b9f4467cf819464b3472baebf5460e79885d45928c0759" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="a8098a31e9203298f2a91993ef81b8e2a366d301e8ba1ade1f70e5ce12ecf3e8" name="fence-agents-scsi" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="fa695ca4b5847da07ed02fb77bc2e24eb13379fdb1dac10087827c99442aefb3" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="059cec1d98664e1a351ec4a73eeaf52ed0a5511fd5645257f3425273e05909f8" name="fence-agents-scsi" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="9010b663ac454c2afb778a226909485023f24462af7e3b934fd248ddf5bcb522" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="f47f9f25468be7ee894a0f9c5e9ea92bf7146bfd35c4c3ec3767184f07cc4479" name="fence-agents-virsh" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="599693ea689ffeb4965e90d1b075ba52a9453b4617fc099510c8c730783d39b1" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="fe074b9d4de87b841e3e147204dc3bf61efa2da90e536bb0cdc1b29d17bb5228" name="fence-agents-virsh" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="5404432470ec93441bface61035cceba3b1828e576d82bdd21c4a597ae482320" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="a6cc57966b7a67670299d0ab98b3bb8ab8f4da23c05653866dc8b752a9c51d80" name="fence-agents-virsh" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="c9e4954e2ead0d69616ed593e54c46dfb58831c187a4906b1ee9361e8d6d52ac" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="c80d5d1e6bd1d9313ee5f9be64d60f844763321bd4774b59d911d0b06d5cca05" name="fence-agents-virsh" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="ae08264c1b834d5be22443a7843681eff4ef0119059a63d1afb331da0008a387" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="d703bab7622fbf140e5a3f4eddb575e8de7228adb432c4fafc82c371e8e391f9" name="fence-agents-virsh" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="4546f8547ed1c0ffc7cdc5c3a9a15f9fb43bf6a6b8e75aeca9459cc0829b53d5" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="4e05dc8da198904907031a3b96c6d55271be2256d4ff960d5fb754a871b46f8a" name="fence-agents-vmware-rest" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="0353ee2fc40c8c47c5dde0276c6b44f1a8e71902f08fa33708efd0cb04640ab5" name="fence-agents-vmware-rest" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="75e88b05fb67a31bdc5d25c710c5596538059bccac6d98e5cfbd3872a80d0594" name="fence-agents-vmware-rest" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="b03c175fafacf531ca1578ed33830765f2d7f13e9c55053bf9c4a9fffdc57988" name="fence-agents-vmware-rest" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="f4b4e092f24b59f0fa714f4a22d589afad6d8e0856319c136f229c2980449b49" name="fence-agents-vmware-rest" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="587ed94a8d8d8de658dbe4e9aaf2e9845284d939893d09a015de2d30643c27ae" name="fence-agents-vmware-rest" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="07aa5e398b4a9c2b59bd154aa6003ec188f6b9a3244dcde28f52aa82ba4c6932" name="fence-agents-vmware-rest" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="6004ceaf07f9e0ac76be3cdf00de54cffffa3ed62da051accd8404d3d4adbda9" name="fence-agents-vmware-rest" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="c4f20ccbfbf7a8935ee77a65419aca943d0e16761fd976105e4e9699a1b24452" name="fence-agents-vmware-rest" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="f9f77b9319510658bac2a9b19a941d37dc048da0947768246681576ea7c1d205" name="fence-agents-vmware-rest" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="1b19d80c84ceae7208b20672a51bdbd76b3c4ffad8d7de4d018596e53ef5cd43" name="fence-agents-vmware-soap" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="0cb9c33966ae0cbd714547eda36eb8219cc03116b32cbf02a7d23e9051574705" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="c70b150d553b7df79c9db13627b59fbd81916cd581ca5865cc0198ddd3471a71" name="fence-agents-vmware-soap" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="5fbaea7d9f072b8e1032ce0223e38b8944d4580e64c6885ce606844d4865e189" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="2bdeaec9be409953ecb15251bffa1e4d9464c9da828524820e08f8b25a242c0c" name="fence-agents-vmware-soap" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="5af974fd6dfdbf6466a4b3f99244cdda14fd214d7e5dacf0010d9d75b113e864" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="3ac64a94ae9046b2e018d3547e306a01cb823647353583851e309243559f864b" name="fence-agents-vmware-soap" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="d00a0c64ba928e91c3e411df2a3502f0b73e3ac4b03e90285b9c2aae4d08b307" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="f29ac21bf0837e84503351e2d3efe544b91c590920af7dffbfb8d730a0dcbdbb" name="fence-agents-vmware-soap" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="77b42bd3670c0fb4b26ddf5f868209d7faf9725a07dba6c328c3d4d4ba825b5a" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="0a26f8b277037a11653d246b03aea53050c1e6e41b6cadb6c0173f973f4d2758" name="fence-agents-wti" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="fc75beabd22b2068dcf5368bf163eb4269c77d7c32c55291088c687a55cd6162" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="9ee5ae01698331bd5821cc5501ac3d9a51229a1b5c51fa975c6ea7c02874c07e" name="fence-agents-wti" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="44fefe3c593dcfa4a1b4036ed92d00151462c5814bc4dc9a13f8b8d27527981c" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="94aff14a0b0bfa7906650634a3b8c8a1f095544a8a6fb2d04c9dd6c0f8326f37" name="fence-agents-wti" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="56fdea81f856885109e3d8d9a5012dd21dbec77955d31cce047333fbaad37f75" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="da89a535bf996f4c53fcbcb5276323ad87a22c944e13c96eb9aef45cd2339a8a" name="fence-agents-wti" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="90b9c57e309b38dad321529e7034212bf207017dd7b28348ebf76f8dfee9884f" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="5ebdf63fee680233691ac9514bc9450e369a2c8eeb42f10a6cb92924b0efe8e0" name="fence-agents-wti" arch="i686">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="2bf77825f69bf4b76f2bb7d217caecd1175f3f0bd10973c9752415b30cb09831" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="677cc50391b009b79a7240965bbfe1260ddd6776b2224d868f8c6d824c7a2a0b" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="3d0533addaa03caa558c58136cc7f0e535914919ce927f833fec1b5803d5b7db" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="6fe4d1b66865eafb7bebbccf0b43d365443322266328eda9327395051b731269" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="d7c7ea4f692006e1ddb314783be2ca0d340ed33cedabb2d90784fc03e8a439c5" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="aebd8965ea5e542f05b6a33ba0d15593d2c8adfba1929095d74db65330d7adb0" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="686f260651912c0c8c51fac75959dd6b54f903f2295a57b325dda7c6300a9dff" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="3d054681bc67b1e5c54d943c0ab101c1d95960796317453258412430f7a1bbb1" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="6cdf149b238389ae3b0517617514ee2d62a67c1733c22768cb450aa871098881" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="5fe4e6ff287bef1dc390c9ba02968a5178b30319b995313b2393ca1b552771b6" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="fe64370b8018cd00cf4de05d083db07188ee36cfbf01eff2ba09542910f3911b" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="12236c8e6733673314f76f5e132f95199f00a9b0b6c48081ae167234c86b7936" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="5e71747280c4ac43e36be28dd4ff2fba7052b825e0db35d108fc91255d1db329" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="8fb41633f858283fdf72c9885ab9c010069278bb09a5701012653ec6dd1b7de4" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="b085d825a669fa461fb9c5986437140aa8a46775ef03f9f337e34d92e931410f" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="e11d24a8649e85308c9216636eda9e0ad01859d9b15bd156559cf7b684aee8e5" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="4646f523f63a7771691d296da6cef7bffff2c34e7b6972f0fa42a6affed9b3a0" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="6061ec5b5400bebc77a2296672ba991d02d0cd724eab790ada59e5cf1706dec1" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="7575afffb07c0ed9ca502cdea1b484f28b44ffe1644aa5be612e7d1e1768ed5e" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="ba33201a4ad20f975aef3446f6e3d0c8865c9638541afb123142d1d764a743ef" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="00f2647c2409e9548ad917b9827bcdd70e4fb43747a3950100e1980ee4e1d7a0" name="firewalld-filesystem" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="e1148e528efa3d32fa5fa14b66a829511fde9ee5b49031be1cfbecd71ce9f515" name="flatpak" arch="i686">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="0ba9e1cca0518a57197722b4b50176a4f2d0b58d70956b0fe4429c5c1a4930d1" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="bb0e089d2a97883b0f76037e50bd45216cf41787fffb342f8a7bf13408cbc921" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="2f9c04784b058a6a8e840b88e05b67022ef3b5fa233b45f4b0031b351ea6b69b" name="flatpak" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="4723c6224af9ba6c7b01c93f0cbb10279f010c9b588585f90f55362a72c536b6" name="flatpak" arch="i686">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="49a4f1d778d435799a0dacdc6c6b7a9773bf5b396444cd483d5a600dc92a52f1" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="08e9c4e0e2a9344b5bf51e8c4af25620d254071f4a769074bbc568a808e302c7" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="7b5c14f2fd8d42fe89d7438cf81f95e2c0402b8e340e8b6070499fe0365d15db" name="flatpak" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="07eceeffd099bbbbb0728c7b455c87095d6c0fa3762e80d5b71edf927c5b8f91" name="flatpak" arch="i686">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="06dd335a808ca9d08f83976b8b7c6e2f48e77d89bb52459476d6aca20d62e8d9" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="fae3e4d445b351f6cf0193a6083a58fe5a5d3e80de3a1b74a973d769d0d62d19" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="5ae5e59fbd8dba4585b15749f4b9d95431ec4a1ce64d41a5921818d1df9d406d" name="flatpak" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="82935091be47c05ec1a3819eaf066eb3b589e22dea0f61ffe4db24e67676744f" name="flatpak-builder" arch="i686">
  <version epoch="0" ver="1.0.0" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="16e8acaa9979b99ea2e3b709474ebad71b59730b5dcacf3e2df9952a393a918b" name="flatpak-builder" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="9681a55a813e9b437d0ad19860a2dcc14391236205b09c787998c55e0b97c3f9" name="flatpak-builder" arch="i686">
  <version epoch="0" ver="1.0.0" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="1baa6de3e64f3e192593da929158f161dbdf1915b70d9f3eb4b9157f568d36f4" name="flatpak-builder" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="55f0426d9272b0950953d291e6fa46278cba2076f1a5c53925bee5e1e8db7739" name="flatpak-builder" arch="i686">
  <version epoch="0" ver="1.0.0" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="cb1715336d5b97ca9f1c9b57665b001bab1c0b1b3dadae87913f8f825bf108ca" name="flatpak-builder" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="854db7262f809766d97b133b16f4af95285edff348cb5a85e12a434427d02ec6" name="flatpak-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="c1ca42d078b712f75811a241e90cd0d6dcd4695c890d30594668209086041426" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="1509b82172cf3ffc2a7242ffc6ffed354a5865226634d0211038c17101b119c7" name="flatpak-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="e62e18f1407c54ff0ad6bf34f1563492efa78e3cfffe64d72dd82fcca8a6c3c4" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="35df9a8dcae65304af81e00ca1555faffb934c1388072613738393883c8ab056" name="flatpak-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="0fb5265f9c3e1647c1e3a28c10731908872b96d9b8bf233a9d22098c950c96ef" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="dfe363af8690ed6e12083cddc163789850365830c95b89ad2c54e07a2c8981d5" name="flatpak-devel" arch="i686">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="e7b8cb1d42209d10235faa68011e5b5e2771fc4c5017b09a008ba6e9463aba58" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="3b9611c5c036c2eb7fcd3d0fa530ae70fa42a357533347b6d16d1529142161a9" name="flatpak-devel" arch="i686">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="49ba91e2a4e9ac11601bc81d6708a1974aef3427a8a87dc6d629288d652a4447" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="ef46c1f100ded296de18e90263f62061e9eb8806e400afeeff2f0ee1b0063221" name="flatpak-devel" arch="i686">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="0bfe69cad909e597b228d7c00b779be1f2b4b168c9cf411e99e036d22dd35260" name="flatpak-devel" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="349d2f541487d0d34fab1bfc46bcdc26b028cd19156fa68d32f9eaa6c65098fd" name="flatpak-libs" arch="i686">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="bafa2fdd56ac882c8e0a921a912fc9bc62fedddc0744db79b20c89a3bd93d098" name="flatpak-libs" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="f77acdde495ae793c6ab94ebf4dc13b308b970a001114e677cb7f49fedab95a4" name="flatpak-libs" arch="i686">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="99e45dbe8da8e02c5ab7127c1c74e861385823ca37b16455022d00cc2d9f36a9" name="flatpak-libs" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="d6f67e62f729ec0a8ceb293016f391c9d2beac8ff36347142b6bbeff69047315" name="flatpak-libs" arch="i686">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="e020bfebca44978f1717056dae405a9a33b6f5eac68a4009843d93555fce40fa" name="flatpak-libs" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="b78bb5ff6d72d6196c2e2f4a4e15c708b08a79bd8cc20ff58f3305f6215f97cc" name="fltk" arch="i686">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="3fb0d70f180c105b6133f61abc596793ba21aa115925835858e4df3e0c07a442" name="fltk" arch="src">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="681781f1a959edd90fb9b94ef71d5bc3741807d58861f90797d3acda0e944c58" name="fltk" arch="src">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="b64c9662b4c58a033c48a9d964af451657d598c31fdd119fbb5e3b365e40bf6f" name="fltk" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="d840f479fffb782721d75b19a92bc3b9c6ad060b1a2213c7f373a30e5f06485d" name="fltk-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="5c6b9211d1a0da708c34658888bc340e617f1a75685d409e87a6d7bdf2d10fe1" name="fltk-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="e8394403bc3449f7d6522af81898f470346a1582346447699b8b71faf0f589aa" name="fltk-devel" arch="i686">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="18f07b6424b19902d1d8b32fdb554ece9de325d1cbe9b73fbe5985dd63166c81" name="fltk-devel" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="d1bd76568fc65823e95139db41ab4bc259aa75b29aa8714f121e81e9eca88d43" name="fltk-fluid" arch="i686">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="6272301f1c93b037eea34d09a177145a059a709e3ccfb6c2db0b8b1c91ecb2e8" name="fltk-fluid" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="388a18b986d23c33ebc5071fc59c89dfa512473e35d6ce943eebc0be44d3e9cd" name="fltk-static" arch="i686">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="418630373363019fb39a4e55763ab41ef3e3c4f5afc14a0f1319945b7fa47f8d" name="fltk-static" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="53c0fbc78b38539b85da653eab8358760373aa6746441df729d58125be572996" name="foomatic" arch="i686">
  <version epoch="0" ver="4.0.9" rel="10.el7_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-9" date="1558612800">- 1707559 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-10" date="1603800000">- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files</changelog>
</package>
<package pkgid="b016fe2700a98449b8a95ece2d73c469d85fb720bcf13db85a0a87ea0e0493d9" name="foomatic" arch="src">
  <version epoch="0" ver="4.0.9" rel="10.el7_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-9" date="1558612800">- 1707559 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-10" date="1603800000">- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files</changelog>
</package>
<package pkgid="08ab88bcfc12f826ff95f30b7aa024b0add87d699a5b1ecdf5242040266c4572" name="foomatic" arch="src">
  <version epoch="0" ver="4.0.9" rel="10.el7_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-9" date="1558612800">- 1707559 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-10" date="1603800000">- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files</changelog>
</package>
<package pkgid="6d4f76ff6ce4e5a6ba2be4bc6e93e10e76ebbe6feaa08a06d1573f4b9d11946e" name="foomatic" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="10.el7_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-9" date="1558612800">- 1707559 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-10" date="1603800000">- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files</changelog>
</package>
<package pkgid="a588697d57ea23caf0a888f1f49dc8246212a97403c07d5bb6c545c979491ecb" name="foomatic-debuginfo" arch="i686">
  <version epoch="0" ver="4.0.9" rel="10.el7_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-9" date="1558612800">- 1707559 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-10" date="1603800000">- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files</changelog>
</package>
<package pkgid="77911473803241447f56ec7b18a683ceae39127ac8a44377978133b9bba4178b" name="foomatic-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="10.el7_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-9" date="1558612800">- 1707559 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-10" date="1603800000">- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files</changelog>
</package>
<package pkgid="fc6dbdeecf6e17674aa2c618887f6b1e0fcde1bea4b9493d2725d88602d336f7" name="foomatic-filters" arch="i686">
  <version epoch="0" ver="4.0.9" rel="10.el7_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-9" date="1558612800">- 1707559 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-10" date="1603800000">- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files</changelog>
</package>
<package pkgid="443ef141b9d316066e0304799722227108d6d68c32fe9ed9835bde8f71652952" name="foomatic-filters" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="10.el7_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-9" date="1558612800">- 1707559 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-10" date="1603800000">- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files</changelog>
</package>
<package pkgid="8335a8e66310d68e1e7087d513ce43b397707b849c4dcdc8e39ed3aa1a3c11e2" name="freerdp" arch="i686">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="b02f26ecc57da105a097f7dbed180a39f1a27d86f40b789a37a71fe293dfb021" name="freerdp" arch="src">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="aa214a15396d9b6fc4f6828771623e37c7ceccc430e5b96adc713efb1b7940f2" name="freerdp" arch="src">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="2f9d2e1f34d14f7e8f137f096e0eef24774274009625909c9849daa3b5f9283e" name="freerdp" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="3df2963ce172dd9cee259eff163167e7a2634ff70fe0fb458fcc8d8e2d8c1488" name="freerdp-debuginfo" arch="i686">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="c86808cacca3b157f913ff26d713144aab9a0fc0244fa5adac1fc0d8606df9a6" name="freerdp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="bc33800611f84e55c491172e4b8a077d074d792b138d05dc2e049a985d13b8d2" name="freerdp-devel" arch="i686">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="e9c8d0feccd152c2e2976d8b249337922ce1f0ef04dd75826f42a2d18bd4cd8c" name="freerdp-devel" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="d2db6febeb67811897d54fec3c3320829abd81b5a4dd2ab77a37423815a68026" name="freerdp-libs" arch="i686">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="ea1fe0947f83b4e8b966c32245efe1ba173017b120614432f4b8fcd31a0bd7cc" name="freerdp-libs" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="b71ef6ee01012f41fc7c248bc2eb604670707acaae9d9078a0f095a8dcaa41b6" name="freetype" arch="i686">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="b52fdb63f6d879409185ce842f56dff17f5bdc72d2b58e4db6d5e919be8f0d17" name="freetype" arch="src">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="c7c9e083a8a9b1004f366d53bbbb3e25d8908dad4559d8bee72c8453730b2b4a" name="freetype" arch="src">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="b5a317cd836f603e529c0f2ace70a5be667e1d159312923c23212aaa26969023" name="freetype" arch="x86_64">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="719552a0494448ba9d0b6ebe4fcb141dc1efb7788cbed6205222b0f717ae22da" name="freetype-debuginfo" arch="i686">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="09ae24d8dcdedb588f537b0b85eccdfe660fb78e943d2ce1e978acd42d37f38f" name="freetype-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="e0e7613dfd428d503fecdf8d69bdb64107ed69e4ae17fb301c3ced5961362160" name="freetype-demos" arch="i686">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="9562e8eef864a2531897b9044a2b08e464e2b8780f6ad478bafe9918c43f310d" name="freetype-demos" arch="x86_64">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="89f6216a2187889e8a198e18265f96283b7407e0294664a3b8b7f4030d929bc7" name="freetype-devel" arch="i686">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="51390d03b47d9c461b202726eda015c1db361d555d3319f5fd636f7fdb205682" name="freetype-devel" arch="x86_64">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="0e31b7eccb294b21e718d6eb08a6aab4f15ebbc57f0452306835581d89f8c1ca" name="gd" arch="i686">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="87885be5af2bb0dd0a7c7602a3a9467241cf74c65f66e1a19642ce0fc89b249c" name="gd" arch="src">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="5199414f914397feef3dbf6017202f1d9be4bb099540369fa69663c5d13904b7" name="gd" arch="src">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="0099df8711f89976818980334b266bdbd0f3afc2df668aae6accb259fbfc370d" name="gd" arch="x86_64">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="66c3cd86a4593d7554a796aa1f179273deeffc59a00737a17de6415513e751c0" name="gd-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="606cb26cf9859340b97afd7c6f81113547aff3943db8ad062430be2e3494158a" name="gd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="baad515777b32889c4607cfd55a6e9d9efcfaa942a5092172685c49c44755d02" name="gd-devel" arch="i686">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="da856d8b1a9bf4c5acb6307929a99c2d2b0be61ec4ee146d48f4d70f643d6120" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="0777561eebbbfc7b45ce4d095a16e44fa55ca72d0dd0c468dc351822551d98f3" name="gd-progs" arch="i686">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="e1028ca7397848cd4484e5d298c170ca2a48c809e550a1b9e54ad3c4ee38a1ce" name="gd-progs" arch="x86_64">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="104f6c8ffd98498f1dd01eef3cd2304e43208881683126f30782d34c711fe826" name="gdm" arch="i686">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="e3a67785fd8551d2b353959831c3427d68463646f1d5d8ad99a1f7f754c7f24e" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="f4bbe46123c098c9049ceeed772f6bd108abae91ede698e2c8bf5ed549535d11" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="4501311696b2fe22e5e4fbf42743466c413e2ea7008083c93a9f0511ecb6e2af" name="gdm" arch="x86_64">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="16ccc440b1552adc6af0713623cc5ed953341c4f202b53b68c7ed336a71876f0" name="gdm" arch="i686">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="8be5500bd2ea589b7aa3e31889cd70e7072f87aa06f88059d3546855800526b8" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="f493cc262de111ad3a5a0402877167346449ce497567a44b6d6326c581b6de70" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="0d4ccbd3ac60ced37a9201df98a2cd04d249b360822d0b55c8a06420f9f76aff" name="gdm" arch="x86_64">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="f43e7965ff63ecce1500dab169aa1274d84cc623c8fabb05664536a131382199" name="gdm-debuginfo" arch="i686">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="33fe7e5a067c9f5267f08247795f25f37d93518d0ea0b26cd84cc8537ae9f569" name="gdm-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="958b56144dd05a419a01f6e4dd0cbec6db569051c318eb8221e92f162131ce52" name="gdm-debuginfo" arch="i686">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="817f183b6ff58a46bbbe5df6d1a344cbadcad5dc9ad4c406add82e7f4abc9621" name="gdm-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="6f19f9c9acf3f0341273d2072d27e4d7ea574aee5f5fc4d127d2f222f8466c2a" name="gdm-devel" arch="i686">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="20da2eefe39958b05773592be50cb669fe30590f8d56862d3a5c48948e5b5f66" name="gdm-devel" arch="x86_64">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="90c363d1046dd2b4780d209a4f72c818a920a4fab459f9e5ebd01268f10105a9" name="gdm-devel" arch="i686">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="c4d1402b8f1a1ed318a7a6a41b5f707cb929ae48a3350c2a831dfd178f23a740" name="gdm-devel" arch="x86_64">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="68651a4147e77ce188f639db086cb023f571e0d1f5ab26a11fa11b6e68d0c196" name="gdm-pam-extensions-devel" arch="i686">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="380c49a02a860f2f872d6e1c405cd85f58431410513e099044fba2ff10d6df68" name="gdm-pam-extensions-devel" arch="x86_64">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="63f2d578ca33b80f6c8eefcea5d2aa9a759212cd897452957b49bfd0277036f8" name="gdm-pam-extensions-devel" arch="i686">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="e92d8241a1382f15937892ab3d99c368f82a01d9928b5d24cc335027a02e00eb" name="gdm-pam-extensions-devel" arch="x86_64">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="f70eb24f178dceb039372bc86a26627639b81b942ae2af4b637dbef2eec48f00" name="gegl" arch="i686">
  <version epoch="0" ver="0.2.0" rel="19.el7_9.1"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-11" date="1372680000">- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
  (CVE-2012-4433)
- fix multi-lib issue in generated documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-12" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.2.0-13" date="1378987200">- Rebuilt for ilmbase soname bump</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-14" date="1385553600">- rebuild (openexr)</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-15" date="1386072000">- rebuild (exiv2)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-16" date="1386158400">- remove BR: w3m, it's only needed for "make dist"</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-17" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19" date="1480593600">- add Requires: dcraw (#1279144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19.1" date="1641902400">- fix CVE-2021-45463 (#2035416)</changelog>
</package>
<package pkgid="88d384da1fdea7da413fea578cb14ef9d51051ee81e1e02ebd18a3af4122158e" name="gegl" arch="src">
  <version epoch="0" ver="0.2.0" rel="19.el7_9.1"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-11" date="1372680000">- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
  (CVE-2012-4433)
- fix multi-lib issue in generated documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-12" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.2.0-13" date="1378987200">- Rebuilt for ilmbase soname bump</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-14" date="1385553600">- rebuild (openexr)</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-15" date="1386072000">- rebuild (exiv2)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-16" date="1386158400">- remove BR: w3m, it's only needed for "make dist"</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-17" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19" date="1480593600">- add Requires: dcraw (#1279144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19.1" date="1641902400">- fix CVE-2021-45463 (#2035416)</changelog>
</package>
<package pkgid="5e93f88a935e78ddb159df2901f6002920880d47d36db40c0697c01b2626d77c" name="gegl" arch="src">
  <version epoch="0" ver="0.2.0" rel="19.el7_9.1"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-11" date="1372680000">- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
  (CVE-2012-4433)
- fix multi-lib issue in generated documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-12" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.2.0-13" date="1378987200">- Rebuilt for ilmbase soname bump</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-14" date="1385553600">- rebuild (openexr)</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-15" date="1386072000">- rebuild (exiv2)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-16" date="1386158400">- remove BR: w3m, it's only needed for "make dist"</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-17" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19" date="1480593600">- add Requires: dcraw (#1279144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19.1" date="1641902400">- fix CVE-2021-45463 (#2035416)</changelog>
</package>
<package pkgid="dafd789ba3d4d84165384c88f20b19066af32819849d4c9e1407907f08bf7ed4" name="gegl" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="19.el7_9.1"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-11" date="1372680000">- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
  (CVE-2012-4433)
- fix multi-lib issue in generated documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-12" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.2.0-13" date="1378987200">- Rebuilt for ilmbase soname bump</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-14" date="1385553600">- rebuild (openexr)</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-15" date="1386072000">- rebuild (exiv2)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-16" date="1386158400">- remove BR: w3m, it's only needed for "make dist"</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-17" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19" date="1480593600">- add Requires: dcraw (#1279144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19.1" date="1641902400">- fix CVE-2021-45463 (#2035416)</changelog>
</package>
<package pkgid="ebad6b35093bbe1b824d5dbaeece5c5ffe5481f633e9415114d66f288975b2b7" name="gegl-debuginfo" arch="i686">
  <version epoch="0" ver="0.2.0" rel="19.el7_9.1"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-11" date="1372680000">- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
  (CVE-2012-4433)
- fix multi-lib issue in generated documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-12" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.2.0-13" date="1378987200">- Rebuilt for ilmbase soname bump</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-14" date="1385553600">- rebuild (openexr)</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-15" date="1386072000">- rebuild (exiv2)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-16" date="1386158400">- remove BR: w3m, it's only needed for "make dist"</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-17" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19" date="1480593600">- add Requires: dcraw (#1279144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19.1" date="1641902400">- fix CVE-2021-45463 (#2035416)</changelog>
</package>
<package pkgid="be1eb458949597b02beca90bcd86b2a92a19f5df879061693ae244400fc33d79" name="gegl-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="19.el7_9.1"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-11" date="1372680000">- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
  (CVE-2012-4433)
- fix multi-lib issue in generated documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-12" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.2.0-13" date="1378987200">- Rebuilt for ilmbase soname bump</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-14" date="1385553600">- rebuild (openexr)</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-15" date="1386072000">- rebuild (exiv2)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-16" date="1386158400">- remove BR: w3m, it's only needed for "make dist"</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-17" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19" date="1480593600">- add Requires: dcraw (#1279144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19.1" date="1641902400">- fix CVE-2021-45463 (#2035416)</changelog>
</package>
<package pkgid="b261c3cd45b26c64a1e2530edef25d95267344bbbd708a1d6919c79baeb928cf" name="gegl-devel" arch="i686">
  <version epoch="0" ver="0.2.0" rel="19.el7_9.1"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-11" date="1372680000">- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
  (CVE-2012-4433)
- fix multi-lib issue in generated documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-12" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.2.0-13" date="1378987200">- Rebuilt for ilmbase soname bump</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-14" date="1385553600">- rebuild (openexr)</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-15" date="1386072000">- rebuild (exiv2)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-16" date="1386158400">- remove BR: w3m, it's only needed for "make dist"</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-17" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19" date="1480593600">- add Requires: dcraw (#1279144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19.1" date="1641902400">- fix CVE-2021-45463 (#2035416)</changelog>
</package>
<package pkgid="abd7f8fc96a362bff13a264dfb2db7f2958dd1f297da2987db98e07a584edc34" name="gegl-devel" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="19.el7_9.1"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-11" date="1372680000">- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
  (CVE-2012-4433)
- fix multi-lib issue in generated documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-12" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.2.0-13" date="1378987200">- Rebuilt for ilmbase soname bump</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-14" date="1385553600">- rebuild (openexr)</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-15" date="1386072000">- rebuild (exiv2)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-16" date="1386158400">- remove BR: w3m, it's only needed for "make dist"</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-17" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19" date="1480593600">- add Requires: dcraw (#1279144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19.1" date="1641902400">- fix CVE-2021-45463 (#2035416)</changelog>
</package>
<package pkgid="9e2282f4be327debade60f0ae39d8d84e1a9103e384e037392f04ae9ab4668b5" name="geoipupdate" arch="i686">
  <version epoch="0" ver="2.5.0" rel="2.el7"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-1" date="1453464000">- Update to 2.2.2
  - geoipupdate now calls fsync on the database directory after a rename to
    make it durable in the event of a crash
- Update autotools patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.1-1" date="1483617600">- Update to 2.3.1
  - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
    greater
  - Previously, on an invalid gzip file, geoipupdate would output binary data
    to stderr; it now displays an appropriate error message
  - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
  - $(sysconfdir) is now created if it doesn't exist (GH#33)
  - The sample config file is now usable (GH#33)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1495800000">- Update to 2.4.0
  - geoipupdate now checks that the database directory is writable: if it is
    not, it reports the problem and aborts
  - geoipupdate now acquires a lock when starting up to ensure only one
    instance may run at a time: a new option, 'LockFile', exists to set the
    file to use as a lock ('.geoipupdate.lock' in the database directory by
    default)
  - geoipupdate now prints out additional information from the server when a
    download request results in something other than HTTP status 2xx; this
    provides more information when the API does not respond with a database
    file
  - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
  - Previously, a variable named 'ERROR' was used, which caused issues building
    on Windows (GH#36)
- Drop EL-5 support
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - noarch subpackages always available now
  - libcurl-devel always available now</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-3" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.0-1" date="1509451200">- Update to 2.5.0
  - Replace use of strnlen() due to lack of universal availability (GH#71)
  - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
  - Remove unused base64 library (GH#68)
  - Add the new configuration option 'PreserveFileTimes'; if set, the
    downloaded files will get the same modification times as their original on
    the server (default is '0') (GH#63)
  - Use the correct types when calling 'curl_easy_setopt()'; this fixes
    warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
  - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
    'ProductIds' option was renamed to 'EditionIDs'; the old options will
    continue to work, but upgrading to the new names is recommended for
    forward compatibility</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-1" date="1549627200">- Resolves: #1643470 - Add geoipupdate package
- Initial commit</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-2" date="1682337600">- Resolves: #2188376 - Add support for hashed license keys to geoipupdate</changelog>
</package>
<package pkgid="b9cbd740180471f821dc196156b60c8cd9bbf49347e82d02aa7b58c5b2808af7" name="geoipupdate" arch="src">
  <version epoch="0" ver="2.5.0" rel="2.el7"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-1" date="1453464000">- Update to 2.2.2
  - geoipupdate now calls fsync on the database directory after a rename to
    make it durable in the event of a crash
- Update autotools patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.1-1" date="1483617600">- Update to 2.3.1
  - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
    greater
  - Previously, on an invalid gzip file, geoipupdate would output binary data
    to stderr; it now displays an appropriate error message
  - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
  - $(sysconfdir) is now created if it doesn't exist (GH#33)
  - The sample config file is now usable (GH#33)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1495800000">- Update to 2.4.0
  - geoipupdate now checks that the database directory is writable: if it is
    not, it reports the problem and aborts
  - geoipupdate now acquires a lock when starting up to ensure only one
    instance may run at a time: a new option, 'LockFile', exists to set the
    file to use as a lock ('.geoipupdate.lock' in the database directory by
    default)
  - geoipupdate now prints out additional information from the server when a
    download request results in something other than HTTP status 2xx; this
    provides more information when the API does not respond with a database
    file
  - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
  - Previously, a variable named 'ERROR' was used, which caused issues building
    on Windows (GH#36)
- Drop EL-5 support
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - noarch subpackages always available now
  - libcurl-devel always available now</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-3" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.0-1" date="1509451200">- Update to 2.5.0
  - Replace use of strnlen() due to lack of universal availability (GH#71)
  - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
  - Remove unused base64 library (GH#68)
  - Add the new configuration option 'PreserveFileTimes'; if set, the
    downloaded files will get the same modification times as their original on
    the server (default is '0') (GH#63)
  - Use the correct types when calling 'curl_easy_setopt()'; this fixes
    warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
  - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
    'ProductIds' option was renamed to 'EditionIDs'; the old options will
    continue to work, but upgrading to the new names is recommended for
    forward compatibility</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-1" date="1549627200">- Resolves: #1643470 - Add geoipupdate package
- Initial commit</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-2" date="1682337600">- Resolves: #2188376 - Add support for hashed license keys to geoipupdate</changelog>
</package>
<package pkgid="61cc09cf16d8fdace5fb21b4afdb241e317c76d75316ef4a0a16c0f9e1c88d5a" name="geoipupdate" arch="src">
  <version epoch="0" ver="2.5.0" rel="2.el7"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-1" date="1453464000">- Update to 2.2.2
  - geoipupdate now calls fsync on the database directory after a rename to
    make it durable in the event of a crash
- Update autotools patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.1-1" date="1483617600">- Update to 2.3.1
  - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
    greater
  - Previously, on an invalid gzip file, geoipupdate would output binary data
    to stderr; it now displays an appropriate error message
  - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
  - $(sysconfdir) is now created if it doesn't exist (GH#33)
  - The sample config file is now usable (GH#33)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1495800000">- Update to 2.4.0
  - geoipupdate now checks that the database directory is writable: if it is
    not, it reports the problem and aborts
  - geoipupdate now acquires a lock when starting up to ensure only one
    instance may run at a time: a new option, 'LockFile', exists to set the
    file to use as a lock ('.geoipupdate.lock' in the database directory by
    default)
  - geoipupdate now prints out additional information from the server when a
    download request results in something other than HTTP status 2xx; this
    provides more information when the API does not respond with a database
    file
  - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
  - Previously, a variable named 'ERROR' was used, which caused issues building
    on Windows (GH#36)
- Drop EL-5 support
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - noarch subpackages always available now
  - libcurl-devel always available now</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-3" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.0-1" date="1509451200">- Update to 2.5.0
  - Replace use of strnlen() due to lack of universal availability (GH#71)
  - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
  - Remove unused base64 library (GH#68)
  - Add the new configuration option 'PreserveFileTimes'; if set, the
    downloaded files will get the same modification times as their original on
    the server (default is '0') (GH#63)
  - Use the correct types when calling 'curl_easy_setopt()'; this fixes
    warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
  - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
    'ProductIds' option was renamed to 'EditionIDs'; the old options will
    continue to work, but upgrading to the new names is recommended for
    forward compatibility</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-1" date="1549627200">- Resolves: #1643470 - Add geoipupdate package
- Initial commit</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-2" date="1682337600">- Resolves: #2188376 - Add support for hashed license keys to geoipupdate</changelog>
</package>
<package pkgid="f3dc0745b278fab69c8ae9b1a0786427eda14fdbf513e1b54ccf2d40958eed30" name="geoipupdate" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="2.el7"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-1" date="1453464000">- Update to 2.2.2
  - geoipupdate now calls fsync on the database directory after a rename to
    make it durable in the event of a crash
- Update autotools patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.1-1" date="1483617600">- Update to 2.3.1
  - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
    greater
  - Previously, on an invalid gzip file, geoipupdate would output binary data
    to stderr; it now displays an appropriate error message
  - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
  - $(sysconfdir) is now created if it doesn't exist (GH#33)
  - The sample config file is now usable (GH#33)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1495800000">- Update to 2.4.0
  - geoipupdate now checks that the database directory is writable: if it is
    not, it reports the problem and aborts
  - geoipupdate now acquires a lock when starting up to ensure only one
    instance may run at a time: a new option, 'LockFile', exists to set the
    file to use as a lock ('.geoipupdate.lock' in the database directory by
    default)
  - geoipupdate now prints out additional information from the server when a
    download request results in something other than HTTP status 2xx; this
    provides more information when the API does not respond with a database
    file
  - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
  - Previously, a variable named 'ERROR' was used, which caused issues building
    on Windows (GH#36)
- Drop EL-5 support
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - noarch subpackages always available now
  - libcurl-devel always available now</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-3" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.0-1" date="1509451200">- Update to 2.5.0
  - Replace use of strnlen() due to lack of universal availability (GH#71)
  - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
  - Remove unused base64 library (GH#68)
  - Add the new configuration option 'PreserveFileTimes'; if set, the
    downloaded files will get the same modification times as their original on
    the server (default is '0') (GH#63)
  - Use the correct types when calling 'curl_easy_setopt()'; this fixes
    warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
  - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
    'ProductIds' option was renamed to 'EditionIDs'; the old options will
    continue to work, but upgrading to the new names is recommended for
    forward compatibility</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-1" date="1549627200">- Resolves: #1643470 - Add geoipupdate package
- Initial commit</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-2" date="1682337600">- Resolves: #2188376 - Add support for hashed license keys to geoipupdate</changelog>
</package>
<package pkgid="1014db4284a289d5adbe3ac752d8c24249288fe7fc161b7b112ec25bfdf2b1dd" name="geoipupdate-cron" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="2.el7"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-1" date="1453464000">- Update to 2.2.2
  - geoipupdate now calls fsync on the database directory after a rename to
    make it durable in the event of a crash
- Update autotools patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.1-1" date="1483617600">- Update to 2.3.1
  - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
    greater
  - Previously, on an invalid gzip file, geoipupdate would output binary data
    to stderr; it now displays an appropriate error message
  - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
  - $(sysconfdir) is now created if it doesn't exist (GH#33)
  - The sample config file is now usable (GH#33)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1495800000">- Update to 2.4.0
  - geoipupdate now checks that the database directory is writable: if it is
    not, it reports the problem and aborts
  - geoipupdate now acquires a lock when starting up to ensure only one
    instance may run at a time: a new option, 'LockFile', exists to set the
    file to use as a lock ('.geoipupdate.lock' in the database directory by
    default)
  - geoipupdate now prints out additional information from the server when a
    download request results in something other than HTTP status 2xx; this
    provides more information when the API does not respond with a database
    file
  - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
  - Previously, a variable named 'ERROR' was used, which caused issues building
    on Windows (GH#36)
- Drop EL-5 support
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - noarch subpackages always available now
  - libcurl-devel always available now</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-3" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.0-1" date="1509451200">- Update to 2.5.0
  - Replace use of strnlen() due to lack of universal availability (GH#71)
  - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
  - Remove unused base64 library (GH#68)
  - Add the new configuration option 'PreserveFileTimes'; if set, the
    downloaded files will get the same modification times as their original on
    the server (default is '0') (GH#63)
  - Use the correct types when calling 'curl_easy_setopt()'; this fixes
    warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
  - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
    'ProductIds' option was renamed to 'EditionIDs'; the old options will
    continue to work, but upgrading to the new names is recommended for
    forward compatibility</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-1" date="1549627200">- Resolves: #1643470 - Add geoipupdate package
- Initial commit</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-2" date="1682337600">- Resolves: #2188376 - Add support for hashed license keys to geoipupdate</changelog>
</package>
<package pkgid="cabbb67f2f45bf45149b062489b590d431a1d891227aea84831e6febc3c2ed07" name="geoipupdate-cron" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="2.el7"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-1" date="1453464000">- Update to 2.2.2
  - geoipupdate now calls fsync on the database directory after a rename to
    make it durable in the event of a crash
- Update autotools patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.1-1" date="1483617600">- Update to 2.3.1
  - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
    greater
  - Previously, on an invalid gzip file, geoipupdate would output binary data
    to stderr; it now displays an appropriate error message
  - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
  - $(sysconfdir) is now created if it doesn't exist (GH#33)
  - The sample config file is now usable (GH#33)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1495800000">- Update to 2.4.0
  - geoipupdate now checks that the database directory is writable: if it is
    not, it reports the problem and aborts
  - geoipupdate now acquires a lock when starting up to ensure only one
    instance may run at a time: a new option, 'LockFile', exists to set the
    file to use as a lock ('.geoipupdate.lock' in the database directory by
    default)
  - geoipupdate now prints out additional information from the server when a
    download request results in something other than HTTP status 2xx; this
    provides more information when the API does not respond with a database
    file
  - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
  - Previously, a variable named 'ERROR' was used, which caused issues building
    on Windows (GH#36)
- Drop EL-5 support
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - noarch subpackages always available now
  - libcurl-devel always available now</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-3" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.0-1" date="1509451200">- Update to 2.5.0
  - Replace use of strnlen() due to lack of universal availability (GH#71)
  - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
  - Remove unused base64 library (GH#68)
  - Add the new configuration option 'PreserveFileTimes'; if set, the
    downloaded files will get the same modification times as their original on
    the server (default is '0') (GH#63)
  - Use the correct types when calling 'curl_easy_setopt()'; this fixes
    warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
  - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
    'ProductIds' option was renamed to 'EditionIDs'; the old options will
    continue to work, but upgrading to the new names is recommended for
    forward compatibility</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-1" date="1549627200">- Resolves: #1643470 - Add geoipupdate package
- Initial commit</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-2" date="1682337600">- Resolves: #2188376 - Add support for hashed license keys to geoipupdate</changelog>
</package>
<package pkgid="baacb6192cd1fe0e74eb7f0322b9dcab8751dddc13867ad22506f1719410fe2c" name="geoipupdate-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.0" rel="2.el7"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-1" date="1453464000">- Update to 2.2.2
  - geoipupdate now calls fsync on the database directory after a rename to
    make it durable in the event of a crash
- Update autotools patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.1-1" date="1483617600">- Update to 2.3.1
  - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
    greater
  - Previously, on an invalid gzip file, geoipupdate would output binary data
    to stderr; it now displays an appropriate error message
  - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
  - $(sysconfdir) is now created if it doesn't exist (GH#33)
  - The sample config file is now usable (GH#33)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1495800000">- Update to 2.4.0
  - geoipupdate now checks that the database directory is writable: if it is
    not, it reports the problem and aborts
  - geoipupdate now acquires a lock when starting up to ensure only one
    instance may run at a time: a new option, 'LockFile', exists to set the
    file to use as a lock ('.geoipupdate.lock' in the database directory by
    default)
  - geoipupdate now prints out additional information from the server when a
    download request results in something other than HTTP status 2xx; this
    provides more information when the API does not respond with a database
    file
  - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
  - Previously, a variable named 'ERROR' was used, which caused issues building
    on Windows (GH#36)
- Drop EL-5 support
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - noarch subpackages always available now
  - libcurl-devel always available now</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-3" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.0-1" date="1509451200">- Update to 2.5.0
  - Replace use of strnlen() due to lack of universal availability (GH#71)
  - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
  - Remove unused base64 library (GH#68)
  - Add the new configuration option 'PreserveFileTimes'; if set, the
    downloaded files will get the same modification times as their original on
    the server (default is '0') (GH#63)
  - Use the correct types when calling 'curl_easy_setopt()'; this fixes
    warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
  - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
    'ProductIds' option was renamed to 'EditionIDs'; the old options will
    continue to work, but upgrading to the new names is recommended for
    forward compatibility</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-1" date="1549627200">- Resolves: #1643470 - Add geoipupdate package
- Initial commit</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-2" date="1682337600">- Resolves: #2188376 - Add support for hashed license keys to geoipupdate</changelog>
</package>
<package pkgid="609ad9f21bd62b2289f92298fca7badd0d6e4e43ab0571973b01269f5607bc31" name="geoipupdate-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="2.el7"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-1" date="1453464000">- Update to 2.2.2
  - geoipupdate now calls fsync on the database directory after a rename to
    make it durable in the event of a crash
- Update autotools patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.1-1" date="1483617600">- Update to 2.3.1
  - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
    greater
  - Previously, on an invalid gzip file, geoipupdate would output binary data
    to stderr; it now displays an appropriate error message
  - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
  - $(sysconfdir) is now created if it doesn't exist (GH#33)
  - The sample config file is now usable (GH#33)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1495800000">- Update to 2.4.0
  - geoipupdate now checks that the database directory is writable: if it is
    not, it reports the problem and aborts
  - geoipupdate now acquires a lock when starting up to ensure only one
    instance may run at a time: a new option, 'LockFile', exists to set the
    file to use as a lock ('.geoipupdate.lock' in the database directory by
    default)
  - geoipupdate now prints out additional information from the server when a
    download request results in something other than HTTP status 2xx; this
    provides more information when the API does not respond with a database
    file
  - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
  - Previously, a variable named 'ERROR' was used, which caused issues building
    on Windows (GH#36)
- Drop EL-5 support
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - noarch subpackages always available now
  - libcurl-devel always available now</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-3" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.0-1" date="1509451200">- Update to 2.5.0
  - Replace use of strnlen() due to lack of universal availability (GH#71)
  - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
  - Remove unused base64 library (GH#68)
  - Add the new configuration option 'PreserveFileTimes'; if set, the
    downloaded files will get the same modification times as their original on
    the server (default is '0') (GH#63)
  - Use the correct types when calling 'curl_easy_setopt()'; this fixes
    warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
  - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
    'ProductIds' option was renamed to 'EditionIDs'; the old options will
    continue to work, but upgrading to the new names is recommended for
    forward compatibility</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-1" date="1549627200">- Resolves: #1643470 - Add geoipupdate package
- Initial commit</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-2" date="1682337600">- Resolves: #2188376 - Add support for hashed license keys to geoipupdate</changelog>
</package>
<package pkgid="4bbfd04916e6f933cca4defdab6abbba62f1256a6f4451ad1028e7f395a9ebc4" name="gfs2-utils" arch="i686">
  <version epoch="0" ver="3.1.10" rel="11.el7_9.1"/>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-3" date="1492516800">- libgfs2: Issue one write per rgrp when creating them
- mkfs.gfs2: Fix resource group alignment issue
- mkfs.gfs2: Free unnecessary cached pages, disable readahead
  Resolves: rhbz#1440269</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-4" date="1503057600">- gfs2_edit savemeta: Fix up saving of dinodes/symlinks
  Resolves: rhbz#1482542</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-5" date="1509624000">- Update URL in spec file
  Resolves: rhbz#1501738
- fsck.gfs2: Make -p, -n and -y conflicting options
  Resolves: rhbz#1507091</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-6" date="1512475200">- gfs2_edit: Print offsets of indirect pointers
  Resolves: rhbz#1518938</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-7" date="1523793600">- mkfs.gfs2: Scale down journal size for smaller devices
  Resolves: rhbz#1498068</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-8" date="1529668800">- glocktop: Remove a non-existent flag from the usage string
  Resolves: rhbz#1544944</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-9" date="1536235200">- fsck.gfs2: Don't check fs formats we don't recognise
- libgfs2: Fix pointer cast byte order issue
  Resolves: rhbz#1616389</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-10" date="1588075200">- libgfs2: Use sizeof for 'reserved' fields in ondisk.c
- fsck.gfs2: Disambiguate 'check_data'
- gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
- fsck.gfs2: Disambiguate check_metalist
- fsck.gfs2: Fix segfault in build_and_check_metalist
- fsck.gfs2: Retain context for indirect pointers in -&gt;check_metalist
- fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
  Resolves: rhbz#1487726</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11" date="1591617600">- gfs2_jadd: Handle out-of-space issues
- gfs2_jadd: error handling overhaul
  Resolves: rhbz#1837640</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11.1" date="1601553600">- mkfs.gfs2: Don't use i/o limits hints &lt;4K for block size
  Resolves: rhbz#1853625</changelog>
</package>
<package pkgid="2da9b501449fb5cdd7ce79725089785f6af45f47d70395a61b0bb233f9bda417" name="gfs2-utils" arch="src">
  <version epoch="0" ver="3.1.10" rel="11.el7_9.1"/>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-3" date="1492516800">- libgfs2: Issue one write per rgrp when creating them
- mkfs.gfs2: Fix resource group alignment issue
- mkfs.gfs2: Free unnecessary cached pages, disable readahead
  Resolves: rhbz#1440269</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-4" date="1503057600">- gfs2_edit savemeta: Fix up saving of dinodes/symlinks
  Resolves: rhbz#1482542</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-5" date="1509624000">- Update URL in spec file
  Resolves: rhbz#1501738
- fsck.gfs2: Make -p, -n and -y conflicting options
  Resolves: rhbz#1507091</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-6" date="1512475200">- gfs2_edit: Print offsets of indirect pointers
  Resolves: rhbz#1518938</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-7" date="1523793600">- mkfs.gfs2: Scale down journal size for smaller devices
  Resolves: rhbz#1498068</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-8" date="1529668800">- glocktop: Remove a non-existent flag from the usage string
  Resolves: rhbz#1544944</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-9" date="1536235200">- fsck.gfs2: Don't check fs formats we don't recognise
- libgfs2: Fix pointer cast byte order issue
  Resolves: rhbz#1616389</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-10" date="1588075200">- libgfs2: Use sizeof for 'reserved' fields in ondisk.c
- fsck.gfs2: Disambiguate 'check_data'
- gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
- fsck.gfs2: Disambiguate check_metalist
- fsck.gfs2: Fix segfault in build_and_check_metalist
- fsck.gfs2: Retain context for indirect pointers in -&gt;check_metalist
- fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
  Resolves: rhbz#1487726</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11" date="1591617600">- gfs2_jadd: Handle out-of-space issues
- gfs2_jadd: error handling overhaul
  Resolves: rhbz#1837640</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11.1" date="1601553600">- mkfs.gfs2: Don't use i/o limits hints &lt;4K for block size
  Resolves: rhbz#1853625</changelog>
</package>
<package pkgid="62badac080fc0ab71e60cc7ef66f9c145272de7bccff3bb40d94ddcb3c89d0ce" name="gfs2-utils" arch="src">
  <version epoch="0" ver="3.1.10" rel="11.el7_9.1"/>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-3" date="1492516800">- libgfs2: Issue one write per rgrp when creating them
- mkfs.gfs2: Fix resource group alignment issue
- mkfs.gfs2: Free unnecessary cached pages, disable readahead
  Resolves: rhbz#1440269</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-4" date="1503057600">- gfs2_edit savemeta: Fix up saving of dinodes/symlinks
  Resolves: rhbz#1482542</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-5" date="1509624000">- Update URL in spec file
  Resolves: rhbz#1501738
- fsck.gfs2: Make -p, -n and -y conflicting options
  Resolves: rhbz#1507091</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-6" date="1512475200">- gfs2_edit: Print offsets of indirect pointers
  Resolves: rhbz#1518938</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-7" date="1523793600">- mkfs.gfs2: Scale down journal size for smaller devices
  Resolves: rhbz#1498068</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-8" date="1529668800">- glocktop: Remove a non-existent flag from the usage string
  Resolves: rhbz#1544944</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-9" date="1536235200">- fsck.gfs2: Don't check fs formats we don't recognise
- libgfs2: Fix pointer cast byte order issue
  Resolves: rhbz#1616389</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-10" date="1588075200">- libgfs2: Use sizeof for 'reserved' fields in ondisk.c
- fsck.gfs2: Disambiguate 'check_data'
- gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
- fsck.gfs2: Disambiguate check_metalist
- fsck.gfs2: Fix segfault in build_and_check_metalist
- fsck.gfs2: Retain context for indirect pointers in -&gt;check_metalist
- fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
  Resolves: rhbz#1487726</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11" date="1591617600">- gfs2_jadd: Handle out-of-space issues
- gfs2_jadd: error handling overhaul
  Resolves: rhbz#1837640</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11.1" date="1601553600">- mkfs.gfs2: Don't use i/o limits hints &lt;4K for block size
  Resolves: rhbz#1853625</changelog>
</package>
<package pkgid="fa64149103960cbad09e7e1538738bcfe83c330cbd1d95e371d521418f19fa17" name="gfs2-utils" arch="x86_64">
  <version epoch="0" ver="3.1.10" rel="11.el7_9.1"/>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-3" date="1492516800">- libgfs2: Issue one write per rgrp when creating them
- mkfs.gfs2: Fix resource group alignment issue
- mkfs.gfs2: Free unnecessary cached pages, disable readahead
  Resolves: rhbz#1440269</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-4" date="1503057600">- gfs2_edit savemeta: Fix up saving of dinodes/symlinks
  Resolves: rhbz#1482542</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-5" date="1509624000">- Update URL in spec file
  Resolves: rhbz#1501738
- fsck.gfs2: Make -p, -n and -y conflicting options
  Resolves: rhbz#1507091</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-6" date="1512475200">- gfs2_edit: Print offsets of indirect pointers
  Resolves: rhbz#1518938</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-7" date="1523793600">- mkfs.gfs2: Scale down journal size for smaller devices
  Resolves: rhbz#1498068</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-8" date="1529668800">- glocktop: Remove a non-existent flag from the usage string
  Resolves: rhbz#1544944</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-9" date="1536235200">- fsck.gfs2: Don't check fs formats we don't recognise
- libgfs2: Fix pointer cast byte order issue
  Resolves: rhbz#1616389</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-10" date="1588075200">- libgfs2: Use sizeof for 'reserved' fields in ondisk.c
- fsck.gfs2: Disambiguate 'check_data'
- gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
- fsck.gfs2: Disambiguate check_metalist
- fsck.gfs2: Fix segfault in build_and_check_metalist
- fsck.gfs2: Retain context for indirect pointers in -&gt;check_metalist
- fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
  Resolves: rhbz#1487726</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11" date="1591617600">- gfs2_jadd: Handle out-of-space issues
- gfs2_jadd: error handling overhaul
  Resolves: rhbz#1837640</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11.1" date="1601553600">- mkfs.gfs2: Don't use i/o limits hints &lt;4K for block size
  Resolves: rhbz#1853625</changelog>
</package>
<package pkgid="c46542e29b18e3f9a26fe3bcb40778af63fcf2b7264a82f03d3f934049e1881c" name="gfs2-utils-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.10" rel="11.el7_9.1"/>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-3" date="1492516800">- libgfs2: Issue one write per rgrp when creating them
- mkfs.gfs2: Fix resource group alignment issue
- mkfs.gfs2: Free unnecessary cached pages, disable readahead
  Resolves: rhbz#1440269</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-4" date="1503057600">- gfs2_edit savemeta: Fix up saving of dinodes/symlinks
  Resolves: rhbz#1482542</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-5" date="1509624000">- Update URL in spec file
  Resolves: rhbz#1501738
- fsck.gfs2: Make -p, -n and -y conflicting options
  Resolves: rhbz#1507091</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-6" date="1512475200">- gfs2_edit: Print offsets of indirect pointers
  Resolves: rhbz#1518938</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-7" date="1523793600">- mkfs.gfs2: Scale down journal size for smaller devices
  Resolves: rhbz#1498068</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-8" date="1529668800">- glocktop: Remove a non-existent flag from the usage string
  Resolves: rhbz#1544944</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-9" date="1536235200">- fsck.gfs2: Don't check fs formats we don't recognise
- libgfs2: Fix pointer cast byte order issue
  Resolves: rhbz#1616389</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-10" date="1588075200">- libgfs2: Use sizeof for 'reserved' fields in ondisk.c
- fsck.gfs2: Disambiguate 'check_data'
- gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
- fsck.gfs2: Disambiguate check_metalist
- fsck.gfs2: Fix segfault in build_and_check_metalist
- fsck.gfs2: Retain context for indirect pointers in -&gt;check_metalist
- fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
  Resolves: rhbz#1487726</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11" date="1591617600">- gfs2_jadd: Handle out-of-space issues
- gfs2_jadd: error handling overhaul
  Resolves: rhbz#1837640</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11.1" date="1601553600">- mkfs.gfs2: Don't use i/o limits hints &lt;4K for block size
  Resolves: rhbz#1853625</changelog>
</package>
<package pkgid="aff5d3babedd22194b29ead0c9a1ca5c2bbe4154db20582914c423a56ab6908e" name="gfs2-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.10" rel="11.el7_9.1"/>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-3" date="1492516800">- libgfs2: Issue one write per rgrp when creating them
- mkfs.gfs2: Fix resource group alignment issue
- mkfs.gfs2: Free unnecessary cached pages, disable readahead
  Resolves: rhbz#1440269</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-4" date="1503057600">- gfs2_edit savemeta: Fix up saving of dinodes/symlinks
  Resolves: rhbz#1482542</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-5" date="1509624000">- Update URL in spec file
  Resolves: rhbz#1501738
- fsck.gfs2: Make -p, -n and -y conflicting options
  Resolves: rhbz#1507091</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-6" date="1512475200">- gfs2_edit: Print offsets of indirect pointers
  Resolves: rhbz#1518938</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-7" date="1523793600">- mkfs.gfs2: Scale down journal size for smaller devices
  Resolves: rhbz#1498068</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-8" date="1529668800">- glocktop: Remove a non-existent flag from the usage string
  Resolves: rhbz#1544944</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-9" date="1536235200">- fsck.gfs2: Don't check fs formats we don't recognise
- libgfs2: Fix pointer cast byte order issue
  Resolves: rhbz#1616389</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-10" date="1588075200">- libgfs2: Use sizeof for 'reserved' fields in ondisk.c
- fsck.gfs2: Disambiguate 'check_data'
- gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
- fsck.gfs2: Disambiguate check_metalist
- fsck.gfs2: Fix segfault in build_and_check_metalist
- fsck.gfs2: Retain context for indirect pointers in -&gt;check_metalist
- fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
  Resolves: rhbz#1487726</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11" date="1591617600">- gfs2_jadd: Handle out-of-space issues
- gfs2_jadd: error handling overhaul
  Resolves: rhbz#1837640</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11.1" date="1601553600">- mkfs.gfs2: Don't use i/o limits hints &lt;4K for block size
  Resolves: rhbz#1853625</changelog>
</package>
<package pkgid="b17a0cf4ebcf12dbe1d55f92205767b84597ec7f454a7a4e5f55479b149402d5" name="git" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="204c4a8fa71afab2f87413d419f5034715ca8b5d511041fe7fafffb7d6ed03e4" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="2b2c4e52097b860c2d4c611790e19642424c6bc2a86907024745e092c0fdddf6" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="72529a1e5308445a7ee18d19f5044a6bf54e9d0608520b246af9a027c0a3ef53" name="git" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="e2355e1ef93e40e236cd465f550a8b31d4690b06d3ae06c1121a711225eb5d21" name="git" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="19eeb038c4b60473454e90fcc38328ec329faffa9262c9e07a8ba0ca0c57145e" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="c538336c5dd5adfb6e3e990f7be5b1cec8d0b51a45f493bf611f388a27662ac4" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="dd1a2e577cbe79d987f753a9a8e0e7fc1f03ccc137e6ad1feacfd349b004806d" name="git" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="1c61d8cd64e4b6ca6dbc81e889c1234f03876be8679fef5fa8565f7fccf5afbe" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="ef0d51bde42f1118b5ce4fca2bd13270cde05946fa3b3d262687704a899a3b43" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="8cb6ec0bf69592d0882de328e591023c866b5beaee0e4bcb0f73aba51f381afb" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="89282eb56a41f24f16f8162c3aa02509940b560378e72f8644d1fef6d30d980b" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="0374092a932fbc22899ff8d86e90abd2b48bbc75fdd5d39ca2e119b3fbdc7b6f" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="bd16cdf519f0d3d26ecabc0d794dd4ed14a0bf419d7473d437f4cf7b8b925a33" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="487e534609946e598a65188a06d12171d0ac0b6eda5dda6b82a8aaacaa309dee" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="3fa1e43c6f46266062f6b51c9ecb7bebfb27226769dad5be6308e78bc664b048" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="5919010896742daeb3d18b9c15025197bbba389b560b62c1b5786214b9f0bdf3" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="afe7791f03b0d99657ef5a6258de7070558e0359e393e6590eb80bfbea26b354" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="c11e279a66dfc53e9cb763cf4c6c7b0655e6df648615c6de69c1776da84db375" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="64a6da988ecd68d096b84fa3f1db65617d3152ec960d5d59867cf2968931e84c" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="4f73c627ea2d5453a3d2abd1b1b77bdf88796e969818d88d9f1c0c2d0b3be585" name="git-daemon" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="23e685e7259342a738e1d4588511af758779680d907c374d3f7509bcf70966c3" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="aa00abd2d6192b8823c4ca46987fbe9f433c0c8670965e1aa76fa3f7d41b886b" name="git-daemon" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="2d0de68580b4702f2566cf453145d51fe2c17ffa63614a06901405880393baf2" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="c5bc4364deed5f8a03fbe16f4f1877a575efe2ac6d1f56e052dba9e6746068ac" name="git-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="71647ca61c132ef1e2f0b069b589ed27dd637579164bdc360e34bc339fad07c3" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="572e9c3f12ed4601fb710fad15fd8cd2d9f57a5c8652e8b199601f809ff2205a" name="git-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="5c57e561a6672501afc5a15342a210a98a06050e7642a9a4eb68bb2e40f63497" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="733f5b4908216658852ea2158e7728b017879074a8796bbbf192a22b8a1f1b98" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="9a9ada1006b856729606309b22ff03b376c3edb44179a7a6d4c729e61623e54d" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="056db0eb979a2198129b5d389798e76e2a7b4752963fed302012958a0146d323" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="6a03d5b9bf8c478894f6ab8eba50589872ffc787a1dca44403d94aca35b874df" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="9e7633e188955dad26561aee0e3b106777d372bb14a7e7e1ebf6e001dd7de15e" name="git-gnome-keyring" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="4b1ad05d0eac7f1c91e75cd01fbd6650be952484c0f0717ad711ac1b78cf9505" name="git-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="2c647ccc9ce9b62f756af0e59ce92f8a76b5c58c89c8b7ed1206261940d0c7ca" name="git-gnome-keyring" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="4ec0804d7922517969925ff1735eda487944e952b68657e681e4de82ec9244a2" name="git-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="4bfcc88b6e53321621afbc567c47ca3a5dbe2d736cc6b24595c8469420611a25" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="1602bf344968b06f7b1c6bd2f1b5a822421d102bbc70b5bb57cc56f45adb72f4" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="3ba513d74038362a8d1c062b2bcadadeab91ca119f1f288c44dab1742dbf6dc5" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="bc8095863043949daa3470a76fcd35c260eaaac88b931790e53bdea5191b51f1" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="91cc02b9a41574da1e349ff10f2418805050a818f143cbd804050a8209622971" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="79ac7845276bc6a3d5ba6fee3d35930448f4a773a1248de4ee3a74b4399eab11" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="dfce1ae4dfff5a6a9c21bd64ce43072ef8f525a6e05285cce57a5c9c0b3bbf29" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="a2299e416facb9c8c33d730c796dc5792c4b0325d5b1aa335e01bcd920de9deb" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="6e20ba97d7bd9758fa478b31db8d57b6e0e188fc41eed5ce81b3afb4141540bd" name="git-instaweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="581e5980a19bf8bc3daaf9e651f9c2be54f2af2fb3262eec47aa1bd7670b8989" name="git-instaweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="5f7ac6c4e0d4e8941609998ab47716ef5874dc80175de71e72fc6121c7cfd5e3" name="git-instaweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="e060d1f177d4f112405657f1e22edc4e9e81dd9762a7a086074b288785d66aea" name="git-instaweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="6a2b12bb14504642780d0d2978c6aabffce8840a86861b682b41f68de32f0144" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="9f7a301c6e6ec47f4c03a973e759e15c8f7d1891cb404097cf261b4b62857b0b" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="28e3250add1ee612b63a2484b77b7684fd761a6126085b653c498d800f13fcce" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="50c4550f0ff6a8faed6a5afd8da797e04670d6b5e2653662b713eb7f1d0cc86e" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="7f3a8699dafc6f3054f9c52d11981200e4b10cb45f3aeb6e2783c170cb0e2a8a" name="git-svn" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="15352ebca0f1b8cefe4b9ad415e06f75135c1304d57b981739de8df8b7e42639" name="git-svn" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="957512711d50a565f58b97dbb359ec5495a5a8968405e16075fd02288b4865e5" name="git-svn" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="debc112b4bf49cecc69bf79f8942088d757e7d3108a62b60c5c773706b6f9d04" name="git-svn" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="d5a4c3eabb32ff05f0ea68a16cb0060abc7bb9050d2b85539f7c6265d68e4214" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="9d0c04f772d1cea4dec0e4470ea9f3cadcd6ef9244a3947d83d70b4a429064fe" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="91b8b0a3d51565c02db9ba19d4ac964e97b9a2d7fa92814a870516e866a0f227" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="36de96c05d3d2f45d7f6bcfc8a8d45a03643e25eedd47bd24000450d0662b498" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="b56c436e8a56733b6e67af0b19c9deee8a29614ebf8851cfad9bb45e3db56a22" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="8a3399499037d94c897a97056e54d84f341b2e37449a367d8a71c902070e8293" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="201ced9218e21e7c5ae7e0d822334fd65dce73e699be024b6027f100501943b6" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="f3e46b208b8a6cb6ff63264b7573f2ef12024e95a7a02b734bc4a8bd268bdbdc" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="58d7675610dd09fc3cfc0d00ebe093a939f2451e96dfa3e54fd013f8ed621855" name="glib2" arch="i686">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="d4d1029f33607dc4b51a4b19f171118b3c482c769e5c7e3c1de1555b9aa6c40a" name="glib2" arch="src">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="c99147026130e1620c13efd75725e6b8c0b0ce19f813fd00d3d05b212c5991d6" name="glib2" arch="src">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="b77c3f784646012b77f137fc2d19ac251eddabde9fb9bb174d884c0b793e67eb" name="glib2" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="724c4d98ac51ab422eef0a35d61e3d904ed5296df376d589d25b21ee05e40fa3" name="glib2" arch="i686">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="5b1a83852a3db0c18c6f69304bb759e3903bf9d8613d9c574d3ac7401499176f" name="glib2" arch="src">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="c5d532b72a58e4a00d9d2faa55f31fd86409b6b3da772ea805e07d1be31b44d3" name="glib2" arch="src">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="c3b509468e778641c51fc81fe226f79e38813292b3f19406950f529e435b8571" name="glib2" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="30700270f7bf20c0edec339c457dce4922e117b08348194e448490b71947e5b8" name="glib2-debuginfo" arch="i686">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="a029350749f994ebb9edac575c622e6d91de145fc8a2e9c39cf8038c1071867f" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="ae8d74a15fa81174e3ea07593a1dc9f00b8ab0caf8eef2df47f13c21895c8f38" name="glib2-debuginfo" arch="i686">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="edf972f7fa2c8d2b983de3403e2882ebc1bd436febb27073a6f0100dfc566ee4" name="glib2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="94e02bab47161c669fda107a587e0fed6de8dbf53138c25746af44eac52b9657" name="glib2-devel" arch="i686">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="bed7c7d26d600238336e956e1b2cafc6b107fe6f021378dd8ad0fb0fb77589e5" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="80febdf9073a842df4dedd24a107e899a8287cd95a392121982ab104573d972b" name="glib2-devel" arch="i686">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="08c02d67a0f8d33a57d35cd839a82e77c8475b54534b23de897861c144da2ec4" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="4f107d9d464b8dcf9aeed89c06c2b87b028f9c829e411a55ed9fef0a11d8049d" name="glib2-doc" arch="noarch">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="fe19381e512ed128493b94ef46b1eacca52ef0cdf6c970eb43d8d3d47d411f95" name="glib2-doc" arch="noarch">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="39b9cc36ced590e29cbb1b2a8dd3d3420eb974ca6dba0a9fb741a27997f74810" name="glib2-doc" arch="noarch">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="fb9e6fac02c47c4de0f2070a25ff338b8727ff2f3a18382fb63d3e57eed70f76" name="glib2-doc" arch="noarch">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="b7067ecec65ac23f8dc0bb92fb4591575a21312bfff8df50fd6126242010d68c" name="glib2-fam" arch="i686">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="fa6f10c4323e6f6f95da3425128da50c3302ea95c09fb7ca58f5d9311c4e4e8a" name="glib2-fam" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="f77c27b35e3a3dfe447e55f42b29a200a19f561632a895d697155c3c2c1f7dbf" name="glib2-fam" arch="i686">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="d63d3530e141b01c71078d018d16d49ab67b4398842461a13ba5e35085c47ccf" name="glib2-fam" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="9307cb79f0c70eae1b4c7c5ff144cf2cafdca2d8437c832e995b1d374176cc33" name="glib2-static" arch="i686">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="bcb694520f96a1c3d286a04fabb6c9a2a272017f886923460dd8360ee940e677" name="glib2-static" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="366a024f1b5837cd25b2e4efddcdde872202868c7f10c7b45cd2e9a48cc99807" name="glib2-static" arch="i686">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="b4649fbcb8e8c40f9a65a564290d0aa0165e837a3df593ff2181fac556021526" name="glib2-static" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="62633210f481c503d61ea38057bab9a5a431b034f763d8133d8f553a8d186ef3" name="glib2-tests" arch="i686">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="f98171f035e0060911f06c8c5d566c39c66c6667bdcb01f064b657c231b0758a" name="glib2-tests" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="e67855b8d41f0e0bead9b618a7aad2e293773ab0ea70a4d8284bbcbb689a0b28" name="glib2-tests" arch="i686">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="3d2d7dcba8eacce8aa1f3ae54dc4a27bddfaec56723a39c0e2b36226f83965c1" name="glib2-tests" arch="x86_64">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="e13d13e9cca1c8a1616c044447c969e7016c51f88f175a27b974cd487e1e826a" name="glibc" arch="i686">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="fd5751636ce51dc15b5a3910773c50f342d797d20267d859e890decf96dcd3e2" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="d5828ebdf861d387f5937956c279d68c1f526f5e7b1a2f744571384a69536a4c" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="98099dd3b15b34236aa5ecdf14af47ea3b224af984493146d0604d47445cccce" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="e0a93fad8a0084c93e2a5a399158519f372a14daac3a8969b589538dcb57accd" name="glibc" arch="i686">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="31d0d53f6afdacc117a8fc58034da8c258489ab242aa5f9b92e0ee95bbe760f9" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="80b7dda663c5a3e9843267730cf59367fe50b26276c7d96df233f605f66eb658" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="918f00700c4244061410a8e863108a8910ed476335e0d885e365bf9e073dd802" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="07ce71fb9e95c121c541cfa50e5b716f43963bc08fc0974df32dae44ad4cf60f" name="glibc" arch="i686">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="7d59bb780fb85e93a40b52469f95aa4eace9e56381454f6d34635ee89100660c" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="c89f6a642170f0f7d9231eb80e8d735cf8cc519d8941b11a9e47ee1547ba837b" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="7d1ebb5f86a3cc04781b6e94b5b38935c95a8497a01cc57b4eb6a00cbee90319" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="8fe263c52671d983745d3151c08ef747b2058b74f8fbda35027c2123d593abce" name="glibc" arch="i686">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="58f7f6860ea8f31c57c4959a119376a3f38e811628e85a104dd7d97149faff32" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="d500cba981c4e027f7127b5445c0b3f6056170a490b46629e50fd47be739c416" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="9190b83a2f079256d45c3d88b954cb047ea27032a6555da65bfa993ba735b335" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="1f262d3c7dad869f2249ee2dcdcee3fd0700290b1a64f3e17cfa630688038c93" name="glibc" arch="i686">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="bc55756ab793a9a63b24daef8c3a2582367fdf5589afbab7fccd4b48bcb57f15" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="2cdb16b23823aa72d4635e896058ca5446c286d7ecde063e2b8e213bd27d2f90" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="c7d6d0e9a82b48c464e83b63cdf119b2347f76776d5103ca973ff8f537361f99" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="00aba37a40292b39799daf438f0f813c8acf43a29e0bdbf1fe67bf5126b4f01f" name="glibc-common" arch="i686">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="5ce086685a76010a375dc51e371c0cf4875e9aab17bb79eab75a4bd7e54d9885" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="d1839c1a132f5b2f30d30ccd9bc248b84901b402186dc5cd67f15593e5586fa4" name="glibc-common" arch="i686">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="b07311d7f38b3778821bf0153ac25384ca400885fb3ab4dafa032cfb8f36d230" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="b37889c75c5f043ac04737767661f4099e582b641abd0331960f50820b8f26ef" name="glibc-common" arch="i686">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="959da4f42a3e5a12434ce1b1a5963cb6a96151070e31e79ddfda60e474bde94e" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="43f369c4fd8537ccd59ea2c9b4e109a456a5bdbb80d09ce3b26ab321246951f7" name="glibc-common" arch="i686">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="38a469df7b844fd997f703e1eb55e57785dfbc3f8991405364c4694e0f70e9d3" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="a25c2da17c509f8e4ac2f444112462c3a08e2f6924386096329b60da0cc6f815" name="glibc-common" arch="i686">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="22f919a9c94123ada586128905e5bf4d44e344b506332412dad9bda4615ebbb2" name="glibc-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="45dae5832e69959cd413e7300e90454a6747726ccd3c63e692b9884b9b31f04d" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="a52e9453d901b359c9941ed15a8c8e0d36dcc7bacfbd2b0d57656c69b34bae27" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="ffbebe2c8ccf8fb7491c02f05f890ff25846a0cb15f4ba9efe8ff7bf59abc6c7" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="cb4a6d1602cf213a9d37ba4d5088a016ac859b82d10eefb6d65788c41284f988" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="5e8216a2cc7c44a19d8ef5dce0d467fbb01303b4a94e33a7e0a7069b7cef5bee" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="469e4d82e737c539b50907ad6df1527a348ae93d5b597bb0befc37e90fe577a0" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="f59246ba1b53faebee933c2d281816c295548fb7477314a784543562b6766102" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="42d6147892e26c65f7549d4d504d1d8fd573261e4565bc5d6b05a63546ca5101" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="ae2baf74ed44cc7a977bc88fc664a6a916f0e5a60f89cd933589eff442ec2b6d" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="4b4339c66b47e1a3032df0283178315d2ba810a530525b17a6404b445c9316c6" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="b3b5a725d5dd1c2febb01c29c036f41c15332238bf693d57019898c1315e2f42" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="f2ffff18c20b8ade6a2381960cd18d1a912569a00eae728b6354715062d06986" name="glibc-debuginfo-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="f0253d60e45af57841a46db72b4ecabb06b777f6c8df78b5815e159fa32a7a26" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="b98e77d6ef7dcf6e223120ce471ef1275f8424785e85eb1060011b8df8e27327" name="glibc-debuginfo-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="be0cd3af65a8f62b8241c3a59e640b1c65e48c57426e57c5ed85264555de3d6a" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="953b0ecd4c21e663cb70787f84ad54b2cf740fba4125a24e734b4c9067b41e4b" name="glibc-debuginfo-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="15fbec64e7ac47d4b5053a1f4e52c5acc9dfb72b96aebf1a6580c2c2c9cbd8fe" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="9c23eacc74014ae1193052a6a7a1072b032e85ec773d019864869e4893190e6a" name="glibc-debuginfo-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="e7f2e9b0dcecc00d3700994b289e3dfb5e45b65266a9ea1b83c9a8b552f24608" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="bce1986b68710f0e07cce33976fbb54553afdd0b158530e4d967e75c906ea118" name="glibc-debuginfo-common" arch="x86_64">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="75984f5d209768e268d5f8f83d734e67520b759b016dd560d68df6dec926dbe0" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="240d99813ee7bbae2e69bf3984c2a0ad9274d6b3d4bf86801d348829fdc56792" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="b922abe56e19b504369cf29f11683d057d36128f0dde99194779b7b54a780591" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="0e17b4e65e5265f05fc7d9634595cd4d99b4b29dc7980d32e5cb2c77a45ccb03" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="695d9d38c4706a81eacc5fcabbfcc5744e9cb2fe77551a446a8dad1b896bbb26" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="af4d226d69d26fc8df50e715f3e119af40a93d02aad0d3b5b23d1d1ac241b2b7" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="bb82c1d2a80f2bea5ff4a52429eeca4f103b2e9d6c499510fcb0d8e1254f2706" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="0292209b88177aa8bf63a41cf1b63279624a80ba3e00fb2e7d3e30db8da090e3" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="f1756343935795536dbec4fa921f9a4296b9a0fdc043c9e673cbf7c87b3ba328" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="6080f22567728c14606a60f58b4d286be124e28a6b7d621d1ceda4beaf18f2f4" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="7d7d5520fd58e9d23896bff33f044d554768193fe715d9789fc460b5161aae49" name="glibc-headers" arch="i686">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="8fe53e4bdc00fb5816d0d202cf578afe453ec8f73da8a6001d35bce463f4d20c" name="glibc-headers" arch="x86_64">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="ee72ba3e89663851a9e13b8189a8282e52c868a2fa1850e49040e35764c20c29" name="glibc-headers" arch="i686">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="84ffd0a5d84d4d91fb7f5f725f280924f8f7dcf7add51e650ae81d4941773ba6" name="glibc-headers" arch="x86_64">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="99193a0deb4cfb6c75b683c8ba3716a6dd88ded292a6290773455dbccb9b4f17" name="glibc-headers" arch="i686">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="0c76005d1742f78a5e79e7af653848bb27d3de7deb6450d864f763c46dcb63a5" name="glibc-headers" arch="x86_64">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="be0d304be2d53ae56693a429dfc1181db30c3aafa55d77a9da7dca608d334697" name="glibc-headers" arch="i686">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="24b05fd47f9bc120bc7c6fbed7dd3cd73b6044b260d3ba203485441aeb7b501f" name="glibc-headers" arch="x86_64">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="896c8fba64385c2b55bb52d1b27fce2a54a8ae0cadc056e78bd5117a758673f4" name="glibc-headers" arch="i686">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="41f8112d097df22b8923b83cbdbed1b6dd2596fdb7b122fd477e2d61988a8834" name="glibc-headers" arch="x86_64">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="215947347f00fa3db44e94e7ed139abb1e2537bf2b1ebb5be045690c89ac47fd" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="037a5c1de686511c92a769fa941f590daf0176aa3a1efc4bf8be56b66cf970e5" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="efedee2e2239cac30e40e5e454a9499063d5938ecd72c89b4b9be83e71f8e0b0" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="4326716ee0f958fd5bc21aed523f83e1adbc73ad130b8f5bde87a4018ccaf25a" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="b21b730f21cbe0ea295c84bab6d4306e1fb1207b536fc94fd5f55d64cb7f9a38" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="71564084bdd84f34c9a232824f1cdc97044f0a7aab8344123e75d266829ed033" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="7f55639994a1ba003a0086ceab1ddc55840e82d3db7c32c3c05af4edb2411625" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="7e6aab2c1adc1730cd12414c955ff064b340005270fa1c554efda906446ceb0b" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="db0473fc4c6628baba6b418fcc1686e2b73580c85b3c35407db69a5553138609" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="d05e4f632824c580db57ce7b35a393d8cfde820a4d56f1be680114b7c43a73a9" name="glibc-static" arch="x86_64">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="e3980b02e970dfdd0145d8024d704cb1266922b86bfa5d64b7c6be82f5dcb066" name="glibc-utils" arch="i686">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="34cc6da595f966212141d09367f2adaacc656b35c561e07e0ae995e8aa786499" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="096ea7e3d7a5e2d0d5a40af6d8868240ec684ba8c571a24354c51fb9a1353429" name="glibc-utils" arch="i686">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="7fc511ac8b781e4f2fd98714b39ffb3d927f866a2159a9b92103c01b9fec49bf" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="cf12a0875616ca9d43a8881bdd6fbf795f79fe66a2006bd3e117b4e3835e2ee3" name="glibc-utils" arch="i686">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="541fa613836f0ea0752b7375ae50306631f3268c217997a20fa323814233fe07" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="11b30b5b4cbacf0c8573277fd57e0c7c60a7d7b555e92b9c91ab41c5b971ce36" name="glibc-utils" arch="i686">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="7ac867337e09575b0e87cd08c92ed9134425fb17207f732dac8ec8a208e92711" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="04600f170e90fb308d2f0aebec1f6a3b3d12cbeef2cee70ceedaea075c1b4068" name="glibc-utils" arch="i686">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="909ba8ce5ac5d9f6da989228310e60d5c803f01d8ce4cbe69200a7b78948f1c1" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="817c49dba0f949cdbc3c2cab7d2ffc07bb996b70228a5e38b714d872f6f79576" name="glusterfs" arch="src">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="914ceb6fda59fc589e42f8d74d0ada11be5a43a610b897fdbcb862002fa05b4c" name="glusterfs" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="0c2686f71b0627a6a239e09169f201c87ba8d616a559181506f499e74870291b" name="glusterfs" arch="src">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="27f005cadee68f7b36a42802261ab5d98f0d9852bd0ef39dbaed59e94efeddca" name="glusterfs" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="f85f30627c883e64093ce0801f8dec8247063e4f34fbd89c9ee58e4b5068cb1c" name="glusterfs-api" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="bdc057df91fb2a46aa8e10adab51f09338ee8b04a749c313ed2663ba90a82540" name="glusterfs-api" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="76ac238946713a9117a9ee944173f242dd185ba046d8b0f3e946a38c77f9af8c" name="glusterfs-api-devel" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="e6e4a580af815108bff6cd33eadd9dcaaa4a09c1e5bf86949fdd5582e17631b6" name="glusterfs-api-devel" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="19e425a4a6aa24b4908a92a01f5ed160ecdabf36633991452d9f04b570a5b7da" name="glusterfs-cli" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="5589061efc26b9b1111b9adb6a70c455991d154c684f53dc0ba02ce74ff7bde3" name="glusterfs-cli" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="aad981cc6ed3fd18f843c0f5ca47978a1beda9c7e867593e4aa546c2625bf24e" name="glusterfs-client-xlators" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="7914b306d8fd18de8e9421877f11ffd2abd144bb022fc8b61ea7bd597522edd4" name="glusterfs-client-xlators" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="e2337caf6d0750c97fa2eab5866ed8fe59b7744bb283ef4303491612b927eac6" name="glusterfs-cloudsync-plugins" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="2550da08fc04279fc022540587aa42c327a465353f23958d884813d8ee4bd22f" name="glusterfs-cloudsync-plugins" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="54473bad8ffa7f7f5a1016a8c80e821debd475a6cb7b14efa945577a41ef0ae2" name="glusterfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="d440def28f9d0cd6afb1e229bc0b70f97aa3b85927c5c0836ed52060384870ae" name="glusterfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="71feb748c67befa0479083ec9a803f82c026c9211cda0dcb79d37981b2383bfb" name="glusterfs-devel" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="b76cc8c8d26dfd2855a5b308ff10ee8e31e7174d27a7052d4531b1161fdaa65d" name="glusterfs-devel" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="ffcfe65c71ec8831675f0591804b53e90fb374d7dea699e3f4cd3c7df3f24b69" name="glusterfs-fuse" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="3863c0d56c3d1ae39b7ea6cd3f22c6461585f60f3eb61c78389692091cb069de" name="glusterfs-fuse" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="dca9d2ad5c2a5fdb2ef023af8044ea43e87b1c5b1fec2c9fb00c21b204033901" name="glusterfs-libs" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="6a08c5a30d005fe26fe59009ce8b69e2a445b870d05aacc01648d124bff1ea80" name="glusterfs-libs" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="56076de498a7f6ca3fb9ff202950a3411acf939e8988531eeb3ba9b3e78fa2b3" name="glusterfs-rdma" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="783c58fc5ba31194b286c82c33cb1c0fa8b8f0a02ce1d6cede3a7f38cf37ea58" name="glusterfs-rdma" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="706bd47cc283e13f8b39cef0b28e5e09a14fc72d0657bc3ef414dbfb7f5ec997" name="gnome-classic-session" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="578502f49771bd138a02d3ffd8831f75e3ad492723e337a95dc31e9accb261d3" name="gnome-classic-session" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="99bd5617824680dc7fce8bea455f08d660458fde31ac25ace3622d4e1b5c7913" name="gnome-classic-session" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="31792b445b450a0de4d36069fb579eb62efa40c827429ada1ea5f3fb70db000e" name="gnome-classic-session" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="bff978bb8f1ef05965dcd542a3d8c6e30f35ac5829ef5659108d3c4597527118" name="gnome-initial-setup" arch="i686">
  <version epoch="0" ver="3.28.0" rel="2.el7_9.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.92-1" date="1473768000">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-2" date="1489060800">- Honor anaconda's firstboot being disabled
  Resolves: rhbz#1226819</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-3" date="1494417600">- Disable 'software' page as it doesn't make sense in RHEL
  Resolves: rhbz#1446735</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-4" date="1494590400">- Make our password validation similar to anaconda's
  Resolves: rhbz#1447941</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-5" date="1509019200">- Update session definition files to work with GNOME 3.26
  Resolves: rhbz#1506607</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.0-1" date="1528286400">- Update to 3.28.0
- Resolves: #1568175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.0-2" date="1560168000">- Ensure vendora logo gets used instead of foot
  Resolves: #1711308</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.0-2.1" date="1655812800">- Remove timezone boundaries
  Related: #2098257</changelog>
</package>
<package pkgid="aac14b066f511b4eaab91493f6f0262ddf77817a79d7d50d970edaeb2a2e229a" name="gnome-initial-setup" arch="src">
  <version epoch="0" ver="3.28.0" rel="2.el7_9.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.92-1" date="1473768000">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-2" date="1489060800">- Honor anaconda's firstboot being disabled
  Resolves: rhbz#1226819</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-3" date="1494417600">- Disable 'software' page as it doesn't make sense in RHEL
  Resolves: rhbz#1446735</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-4" date="1494590400">- Make our password validation similar to anaconda's
  Resolves: rhbz#1447941</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-5" date="1509019200">- Update session definition files to work with GNOME 3.26
  Resolves: rhbz#1506607</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.0-1" date="1528286400">- Update to 3.28.0
- Resolves: #1568175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.0-2" date="1560168000">- Ensure vendora logo gets used instead of foot
  Resolves: #1711308</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.0-2.1" date="1655812800">- Remove timezone boundaries
  Related: #2098257</changelog>
</package>
<package pkgid="f10b7ee1f5a8d287ce4034d309abe20a7bff25ff430ef87d9407923e66a61d31" name="gnome-initial-setup" arch="src">
  <version epoch="0" ver="3.28.0" rel="2.el7_9.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.92-1" date="1473768000">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-2" date="1489060800">- Honor anaconda's firstboot being disabled
  Resolves: rhbz#1226819</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-3" date="1494417600">- Disable 'software' page as it doesn't make sense in RHEL
  Resolves: rhbz#1446735</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-4" date="1494590400">- Make our password validation similar to anaconda's
  Resolves: rhbz#1447941</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-5" date="1509019200">- Update session definition files to work with GNOME 3.26
  Resolves: rhbz#1506607</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.0-1" date="1528286400">- Update to 3.28.0
- Resolves: #1568175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.0-2" date="1560168000">- Ensure vendora logo gets used instead of foot
  Resolves: #1711308</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.0-2.1" date="1655812800">- Remove timezone boundaries
  Related: #2098257</changelog>
</package>
<package pkgid="493b249eaab5be196967034aa7abf349d8597cea8a97db09b9b736dfd2d268dc" name="gnome-initial-setup" arch="x86_64">
  <version epoch="0" ver="3.28.0" rel="2.el7_9.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.92-1" date="1473768000">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-2" date="1489060800">- Honor anaconda's firstboot being disabled
  Resolves: rhbz#1226819</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-3" date="1494417600">- Disable 'software' page as it doesn't make sense in RHEL
  Resolves: rhbz#1446735</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-4" date="1494590400">- Make our password validation similar to anaconda's
  Resolves: rhbz#1447941</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-5" date="1509019200">- Update session definition files to work with GNOME 3.26
  Resolves: rhbz#1506607</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.0-1" date="1528286400">- Update to 3.28.0
- Resolves: #1568175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.0-2" date="1560168000">- Ensure vendora logo gets used instead of foot
  Resolves: #1711308</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.0-2.1" date="1655812800">- Remove timezone boundaries
  Related: #2098257</changelog>
</package>
<package pkgid="6c29cc2249c19f3af5d3c5599690b6276ab33078b721b1b0c017eb414719e17f" name="gnome-initial-setup-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.0" rel="2.el7_9.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.92-1" date="1473768000">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-2" date="1489060800">- Honor anaconda's firstboot being disabled
  Resolves: rhbz#1226819</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-3" date="1494417600">- Disable 'software' page as it doesn't make sense in RHEL
  Resolves: rhbz#1446735</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-4" date="1494590400">- Make our password validation similar to anaconda's
  Resolves: rhbz#1447941</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-5" date="1509019200">- Update session definition files to work with GNOME 3.26
  Resolves: rhbz#1506607</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.0-1" date="1528286400">- Update to 3.28.0
- Resolves: #1568175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.0-2" date="1560168000">- Ensure vendora logo gets used instead of foot
  Resolves: #1711308</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.0-2.1" date="1655812800">- Remove timezone boundaries
  Related: #2098257</changelog>
</package>
<package pkgid="27f7855d2f933ba24335ef8a9fda8ca9cb5116e229e2bf74fd6a21981ca41bc0" name="gnome-initial-setup-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.0" rel="2.el7_9.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.92-1" date="1473768000">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-2" date="1489060800">- Honor anaconda's firstboot being disabled
  Resolves: rhbz#1226819</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-3" date="1494417600">- Disable 'software' page as it doesn't make sense in RHEL
  Resolves: rhbz#1446735</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-4" date="1494590400">- Make our password validation similar to anaconda's
  Resolves: rhbz#1447941</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-5" date="1509019200">- Update session definition files to work with GNOME 3.26
  Resolves: rhbz#1506607</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.0-1" date="1528286400">- Update to 3.28.0
- Resolves: #1568175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.0-2" date="1560168000">- Ensure vendora logo gets used instead of foot
  Resolves: #1711308</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.0-2.1" date="1655812800">- Remove timezone boundaries
  Related: #2098257</changelog>
</package>
<package pkgid="772a08c72558f1a7aa4b84ac6283ab6e10aef8d6404d87b882589c13f9d4120b" name="gnome-settings-daemon" arch="i686">
  <version epoch="0" ver="3.28.1" rel="10.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
</package>
<package pkgid="6341ba1cb18e7d6e3bf016952a14de6c48406d40f13dc2a04bf71c614835bd43" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.28.1" rel="10.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
</package>
<package pkgid="87f12e3b106c800f1c3e2f1f532c77d0c96efa05c9c8f1092a7600075b04f6bd" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.28.1" rel="10.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
</package>
<package pkgid="af53604e2d3d82eaf0978cb58542b9e3ee068074e06d85dc08412934141c79e1" name="gnome-settings-daemon" arch="x86_64">
  <version epoch="0" ver="3.28.1" rel="10.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
</package>
<package pkgid="b048a62586dfce3479c081b5ee5dc2f7807903e235510a53fed0c5936498f7f2" name="gnome-settings-daemon" arch="i686">
  <version epoch="0" ver="3.28.1" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-11" date="1626436800">- Fix possible crash on gsd-media-keys startup
  Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
  Resolves: #1909954
- Revert mapping of "XF86RFKill" key
  Resolves: #1888412</changelog>
</package>
<package pkgid="d2dbc4f60192efee2101e512b86a0700e9ed9663efd46126adc5f48d81311282" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.28.1" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-11" date="1626436800">- Fix possible crash on gsd-media-keys startup
  Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
  Resolves: #1909954
- Revert mapping of "XF86RFKill" key
  Resolves: #1888412</changelog>
</package>
<package pkgid="f94bf6e1d5d4be0808a82e0f1ec6934c511368a65a833d2b8258a70895df2765" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.28.1" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-11" date="1626436800">- Fix possible crash on gsd-media-keys startup
  Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
  Resolves: #1909954
- Revert mapping of "XF86RFKill" key
  Resolves: #1888412</changelog>
</package>
<package pkgid="afc8df744b4b91900f972fcfff97fadc18980124274b18e235e9429a210b5357" name="gnome-settings-daemon" arch="x86_64">
  <version epoch="0" ver="3.28.1" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-11" date="1626436800">- Fix possible crash on gsd-media-keys startup
  Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
  Resolves: #1909954
- Revert mapping of "XF86RFKill" key
  Resolves: #1888412</changelog>
</package>
<package pkgid="6f1466202dfaae2b0c91deb4babf0db1ece7ef461f1ef8325f8241b485bc96de" name="gnome-settings-daemon-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.1" rel="10.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
</package>
<package pkgid="e8fbb5a8f33a2e3f67b9321845a0b545f19fbdcc769e3746c721cde57682abc9" name="gnome-settings-daemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.1" rel="10.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
</package>
<package pkgid="4182036ce7214471e5a3087b2d31f2bc1f7b266800622b4ce5960e82f725af85" name="gnome-settings-daemon-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.1" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-11" date="1626436800">- Fix possible crash on gsd-media-keys startup
  Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
  Resolves: #1909954
- Revert mapping of "XF86RFKill" key
  Resolves: #1888412</changelog>
</package>
<package pkgid="9fd273551f07e1abab2162378e017225ec1826c924b6a0be8f3bc994e026f88f" name="gnome-settings-daemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.1" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-11" date="1626436800">- Fix possible crash on gsd-media-keys startup
  Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
  Resolves: #1909954
- Revert mapping of "XF86RFKill" key
  Resolves: #1888412</changelog>
</package>
<package pkgid="373926c5f92560bc4bb6f076a404f8a4aff02228a92833bab74f9651388725b5" name="gnome-settings-daemon-devel" arch="i686">
  <version epoch="0" ver="3.28.1" rel="10.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
</package>
<package pkgid="11670879177fc3d5149078fe7e3953c42e37b333074af1b23050b275b6ce4ac8" name="gnome-settings-daemon-devel" arch="x86_64">
  <version epoch="0" ver="3.28.1" rel="10.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
</package>
<package pkgid="f11f889131e4beb4e0eec159a9ef9588073e087db0dc98c2033ada0ddebe7ac4" name="gnome-settings-daemon-devel" arch="i686">
  <version epoch="0" ver="3.28.1" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-11" date="1626436800">- Fix possible crash on gsd-media-keys startup
  Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
  Resolves: #1909954
- Revert mapping of "XF86RFKill" key
  Resolves: #1888412</changelog>
</package>
<package pkgid="c4c6c41ac0a7ef9db4f1333dbf9bc5c951ef15781b235bed904b0ce297774770" name="gnome-settings-daemon-devel" arch="x86_64">
  <version epoch="0" ver="3.28.1" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-11" date="1626436800">- Fix possible crash on gsd-media-keys startup
  Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
  Resolves: #1909954
- Revert mapping of "XF86RFKill" key
  Resolves: #1888412</changelog>
</package>
<package pkgid="d29ecf463a23272ee84afb16738d4376bb89f4985906f7e38298579711a30059" name="gnome-shell" arch="i686">
  <version epoch="0" ver="3.28.3" rel="32.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.coM&gt; - 3.28.3-23" date="1574337600">- Fix "Not Listed?" entry to shows characters instead of bullets
  Resolves: #1772896</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
</package>
<package pkgid="454d6f621684e943c5b9caeba996027830e8669815a7a2f60874a657b87933a3" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="32.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.coM&gt; - 3.28.3-23" date="1574337600">- Fix "Not Listed?" entry to shows characters instead of bullets
  Resolves: #1772896</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
</package>
<package pkgid="f15e5a537dd041b526efd0143746f9bf0f03ca6bf246a58ab3ef60e1a9c1f9a6" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="32.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.coM&gt; - 3.28.3-23" date="1574337600">- Fix "Not Listed?" entry to shows characters instead of bullets
  Resolves: #1772896</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
</package>
<package pkgid="a5048f7fd682288ba6a9f7a659bedc274707e2040ad4279f2ea269d4ad086886" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="32.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.coM&gt; - 3.28.3-23" date="1574337600">- Fix "Not Listed?" entry to shows characters instead of bullets
  Resolves: #1772896</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
</package>
<package pkgid="1bf9e4d459bad20cbef80bfaa975542b4cc4edec8d92cf7823b6ca18629a89c0" name="gnome-shell" arch="i686">
  <version epoch="0" ver="3.28.3" rel="33.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
</package>
<package pkgid="eff6cc4d70404d1931d52ea1d11972446879496d007a0e80bc2bd98a9627f375" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="33.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
</package>
<package pkgid="b6225d9f0603b683e7ddc9e5ba35eeb76bc51fef8d9a3d9981c5e23a5323e51f" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="33.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
</package>
<package pkgid="673989a266313da8a472d34f45d87613881d31e0774f3f675ae7066bb09079b3" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="33.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
</package>
<package pkgid="c1ef32b53b82c6f2e20e118b396bbbbe2fdd11d8b6c0ebb0a763e0d15eb85ac2" name="gnome-shell" arch="i686">
  <version epoch="0" ver="3.28.3" rel="34.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.29.3-34" date="1626264000">- Fix another JS warning
  Resolves: #1860445</changelog>
</package>
<package pkgid="31b907904221d63cecd048ff0a7594a237b0d898edf1724cf2c0114585abe9e6" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="34.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.29.3-34" date="1626264000">- Fix another JS warning
  Resolves: #1860445</changelog>
</package>
<package pkgid="1fae03c9fff64a50e34323ec476621fe59b574e4f7cea1e8436995bfddad927a" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="34.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.29.3-34" date="1626264000">- Fix another JS warning
  Resolves: #1860445</changelog>
</package>
<package pkgid="cb31c6d63516fd66ff65cffb2814043d1b9c31b5c3519e532654c2c0970d3b75" name="gnome-shell" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="34.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.29.3-34" date="1626264000">- Fix another JS warning
  Resolves: #1860445</changelog>
</package>
<package pkgid="1128d04834d287a9985c5ea251558a7370109207e9b58a6579a872dc99b03d80" name="gnome-shell-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="32.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.coM&gt; - 3.28.3-23" date="1574337600">- Fix "Not Listed?" entry to shows characters instead of bullets
  Resolves: #1772896</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
</package>
<package pkgid="2778b971c4b180a460503adaa548e2c63dc6e95dc668327921967ac36f2c4482" name="gnome-shell-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="32.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.coM&gt; - 3.28.3-23" date="1574337600">- Fix "Not Listed?" entry to shows characters instead of bullets
  Resolves: #1772896</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
</package>
<package pkgid="28356e1353edba745fb82711c4389dd0b852e2bd0d81226addaff7e4f297efc2" name="gnome-shell-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="33.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
</package>
<package pkgid="bf81738f355aecde58611732044df29520463a3229075ff5392031c8060c8f04" name="gnome-shell-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="33.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
</package>
<package pkgid="cfe79f57ffcdf193db5c3b624d0714b72bfc5c04752a89b5e4a43bfbfb69c2f4" name="gnome-shell-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="34.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.29.3-34" date="1626264000">- Fix another JS warning
  Resolves: #1860445</changelog>
</package>
<package pkgid="44b09c29f48b8fb3ff9ce3db12fea752b5123b901c1615ecb676fe72a8946ab7" name="gnome-shell-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="34.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.29.3-34" date="1626264000">- Fix another JS warning
  Resolves: #1860445</changelog>
</package>
<package pkgid="3827e312694bf3e43849f8e6eb723d1866ac5631c34a179222d730b4c1839db3" name="gnome-shell-extension-alternate-tab" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="0312d39a3cf545a48264741facd3d7066f62a334d35ad66036c80ffbf9564d1c" name="gnome-shell-extension-alternate-tab" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="e047c1bb59e9c399d2c8690611d8c799b0ae592f5e72f0d903668388c85d529b" name="gnome-shell-extension-alternate-tab" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="a70e2bbd7ab55145c264e5e90f117b51f64fe19d4fb0cf48722c1e4214f56cf5" name="gnome-shell-extension-alternate-tab" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="a8dc4e0425a4de03445806809416e4ff206aebedffe406bb719fa5f3c39cc439" name="gnome-shell-extension-apps-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="d93536cb00a2b9d1b88ca885b81c138f16ba34ac8c528635cc0268d6905eca37" name="gnome-shell-extension-apps-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="1ae36be7f29cdeb3a26044f20fcf74598a19d500ddaae2450ec835e7dff13480" name="gnome-shell-extension-apps-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="4be5c36e721009f8e548e30bd52d19716bd32078632ecc6f62fb84572fcc9672" name="gnome-shell-extension-apps-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="f2b70c3997b8c9f84e49be30e6bdcc8042abb65a50d33f100abdfe7ca1b3cfef" name="gnome-shell-extension-auto-move-windows" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="8cffc1c01e7bfd339d064c170661eba174f7903aef296190ae71f6937507d35e" name="gnome-shell-extension-auto-move-windows" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="5a063d5f5c0a22fe30fd737e0feb4d79c15793cceacbba01cf391bee80a96b2c" name="gnome-shell-extension-auto-move-windows" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="a6755246dd69f55c4755452a9552da06bb5da219912fbbecd44d986c5821c354" name="gnome-shell-extension-auto-move-windows" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="8bc3954b5a5775c9e12e995b4c25fdc454836a689db118c25f4cb8882a9ac1dd" name="gnome-shell-extension-common" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="36571dc40f1ba0067e20477566cae34f0c184741f93f22ff2f21a23bd6bd7a12" name="gnome-shell-extension-common" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="d5ac2b9f118bb6b423791550728b91eab801826108c3cff3ccd73ff6ee9fc3ae" name="gnome-shell-extension-common" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="ee6739589f028e708a4ff680516d5f5bb7d3938ea3955a3b04adebe6d6fe3e24" name="gnome-shell-extension-common" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="ba1c09794a864f43e3df44c939a9fa102c60d5e082c2f13aa45a3c5ab902b3e6" name="gnome-shell-extension-dash-to-dock" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="544341e9b6ee5c9e7036803f18d1daf61259e0027c762e2f01d8e4994fa55b8e" name="gnome-shell-extension-dash-to-dock" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="1439d64ab5a52ca35e8f4f44678f939a15723098be04cb7e2ff069f15856a5fb" name="gnome-shell-extension-dash-to-dock" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="bdb3cca59a8235a4c200e5eec4da282bd5bfc65c56234f7b8ed1e8de36fedd94" name="gnome-shell-extension-dash-to-dock" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="34f2ebfd3e0c935eab4718896b6564f393a45f854ee6748a6b9489fa009cc4a2" name="gnome-shell-extension-disable-screenshield" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="982366d883efb34edec61b5fdbdbfdaa98273fe51169055871ed89db370f8c3c" name="gnome-shell-extension-disable-screenshield" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="ed3085252e6169f8a58e6664fee3ec8a2853564e4c0ba034cb66dc12e3c4531a" name="gnome-shell-extension-disable-screenshield" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="fc7466934b56563338fc7d2a1b510d5a35bd2b3a3dbbebc7e2c6e438cd60f4af" name="gnome-shell-extension-disable-screenshield" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="dd2a05288061a5f81f6d87d5b84ea2c03d7b4d1754c264f681e0aa990ed44c81" name="gnome-shell-extension-drive-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="a503e451e1eb849e132bee23760b63a11f344a5819b3772e6c79d08b5d6e7157" name="gnome-shell-extension-drive-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="51683c2890afdd4f0403f1bbf883c1dc9d8560f19d483239b61678cf536b77c1" name="gnome-shell-extension-drive-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="d50f10630bcfaa3cc4b53dd008fdaa62cdc3706a12dde1b66335838498a5a3fb" name="gnome-shell-extension-drive-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="daa3b84eb5ff46d180e0e713afe4fcd334b1d023927a625dd73e2c994aac4007" name="gnome-shell-extension-extra-osk-keys" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="ba1ef4b689c06d09e3b46de25a7e59f69ad411758bc8d40e5a3ae9d5dea0cbcd" name="gnome-shell-extension-extra-osk-keys" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="49adf1a0df23d389d6d616c71dcdbff9e1aa162bec7ec78c8776da67352a3b7f" name="gnome-shell-extension-extra-osk-keys" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="733bd70ea88d8ebe1c3b9b51e48adcd7c9105069771204b6acd473ab6a428faf" name="gnome-shell-extension-extra-osk-keys" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="cffba987d91453888ecd7eefaeeccb761890ed8041149ee8e0fb2b74d4a58a15" name="gnome-shell-extension-horizontal-workspaces" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="25b9f64362a1a877d8d914e8422bc81193ad7d40862fd725bd2613490a001064" name="gnome-shell-extension-horizontal-workspaces" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="02321b260a7e8813f6f247d7afc7f76e9fccd6b5ab0cfe758b6a372b2a14fd73" name="gnome-shell-extension-horizontal-workspaces" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="836db3fa58df594984a9c4ad7bef91ecbe62970c3cdf69e39dbeb0809253ac01" name="gnome-shell-extension-horizontal-workspaces" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="b0464d62076f4b34cc60cb3e3c83149f3c42a51ca8ced8ec9f04143c7250856b" name="gnome-shell-extension-launch-new-instance" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="2636ff26298e9a53dd4955c496f8c213ede454518921fe4645e75ce1eda2dfa7" name="gnome-shell-extension-launch-new-instance" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="d4068bc5dddaaf6315d7e57a64522e43c021ecaff75f246a822ec5b628aea62b" name="gnome-shell-extension-launch-new-instance" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="3f9cec5de12cddb3e826b53366bae4fa390648984716a41e689e3d75cc649c35" name="gnome-shell-extension-launch-new-instance" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="1d4a2f0fa270ea7aaff22f41312bd9509e88047fa7f29bc88e1aeb26e119e5ba" name="gnome-shell-extension-native-window-placement" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="db3e65a9002ff827c164339b36a5239ed99fd90fc74ced4dcd5aa1859c8111e0" name="gnome-shell-extension-native-window-placement" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="d3fdd967f258d092c27ea32c77d07085149f0953a84d24cfcc69069224f76d7b" name="gnome-shell-extension-native-window-placement" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="c599044ea0bda9d604edc6353941c79d01f960258d26c29d2d8c9c976105ef0e" name="gnome-shell-extension-native-window-placement" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="2b57920d821b4384daa87816939ded100226cbb7b69f9c801c14be6e5ec4e53d" name="gnome-shell-extension-no-hot-corner" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="b3fe5de843ed77e137b1bf810578b42bc9788db9ec1daf05a5b84ba3468f76ba" name="gnome-shell-extension-no-hot-corner" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="c57869ffe9952b2b6446ed44292aa6599232623ed6105d81e16da19de28f5f5a" name="gnome-shell-extension-no-hot-corner" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="71c1ef23fd7fbe2a04379ce574cf3a505821f1f4709b05c386f2693c94b77582" name="gnome-shell-extension-no-hot-corner" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="e423a44645e81cc13fcf9f5827a2d61755bde4b47078c125bfa176b2c6835b0e" name="gnome-shell-extension-panel-favorites" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="3a1084cc0e3d5602128045845a024b3b27c6874da0d126171372518d1adccc55" name="gnome-shell-extension-panel-favorites" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="442c6dd82b1d4bb8efa59c027c3198a6e79e252cc13ad7f44faf6509c4d86135" name="gnome-shell-extension-panel-favorites" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="b7d3d2f480fdb83d46ff8229b2c27c59edfb58bd16698ac5937b7dc3b042c12c" name="gnome-shell-extension-panel-favorites" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="a56e74447095c5bebbd74b9ac9642dd67079661544ee7e8ae0e58bcb6369a908" name="gnome-shell-extension-places-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="7d2859b659d1b2bf84fa3abab15c7438dd7714a6af01dcaf72df40dbdc03b36c" name="gnome-shell-extension-places-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="7430812c367288682aea7389c5c19fda6424e2e6bb071761bae6d06cf96f514d" name="gnome-shell-extension-places-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="8d983a434c7c67a79ca41728c14a79c9d93ef6d9d4680d9a4d82948fb24bd1a8" name="gnome-shell-extension-places-menu" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="652a22cc2b54d9abbb1efe746402012e54ed842ac48b13e15f6b3a7642f22176" name="gnome-shell-extension-screenshot-window-sizer" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="8aaefaf2372b291177c81259e71be03d647a95501380e8a39f9224ffc3050a03" name="gnome-shell-extension-screenshot-window-sizer" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="3da1d840e1f57bfc4370b9ff3168f2852cc36fe71364eb2a09cd00555c94ea9a" name="gnome-shell-extension-screenshot-window-sizer" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="30ec7d63d204392ae9bd2a1a4aeb41b66264d033b93970c7cff66f7fbaefa656" name="gnome-shell-extension-screenshot-window-sizer" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="bed7fdaf0b86244c01a07e1006b321ccd78779de03e7f519b265cb6d590b596b" name="gnome-shell-extension-systemMonitor" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="92f4f055b370f0428e7c31ca8e579168a56218fc26ca98c14cad0706f8be62da" name="gnome-shell-extension-systemMonitor" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="11a16fe63c3173ae628923f632960d16baa48b8477adf48a6781752f02760da4" name="gnome-shell-extension-systemMonitor" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="d70942b3d24a7510199e800b0f3f15f4bdd8fe54d571899e38645788fc79e9fd" name="gnome-shell-extension-systemMonitor" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="df22b17a51d70c0a29411b1a7b893ff6249b6d2749b8ef4d64aaf5d41f014a89" name="gnome-shell-extension-top-icons" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="1bc039e7b9fc239469ffb30a2ad0720ef18ff392b2e676915afd61f710f84177" name="gnome-shell-extension-top-icons" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="c8b601845b3eec109a2afebaa944200464a17c5e5fd6a574623841fae71e563e" name="gnome-shell-extension-top-icons" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="ae5f17947bddc963b5474f3535857a5775b5aa5322e4e992a32939de6d196b46" name="gnome-shell-extension-top-icons" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="c56f035efd85ec23ba414f8b94e0636c4297eac4008a3199885c7d9713879e32" name="gnome-shell-extension-updates-dialog" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="2e205a560ea0500fb76de4c424203db3a8cc6970587d79524e08e3c7856b9d1d" name="gnome-shell-extension-updates-dialog" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="6168c043bb6cfddd53b4cdd749c13a6be1b7f2435e89dd152fa6eb6611ac0d28" name="gnome-shell-extension-updates-dialog" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="3dd5f17f362f08954e4ed6be9b92ed1832c5c9f3995543a5831f5a514dd42453" name="gnome-shell-extension-updates-dialog" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="bae417e5036468eb7b7fec172dc0cec471123ff4cff747abe5791ed6bb429cd5" name="gnome-shell-extension-user-theme" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="caec419bfb959adffe38f68a52c77cfb133fafec16a664a09ac724a3700b5ab2" name="gnome-shell-extension-user-theme" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="ac8cda09e8dcdff836029ad89dc8cca023f9e45c4392e97ecbf3201359a2a409" name="gnome-shell-extension-user-theme" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="cd124aec1c26992db1484e0a2251c28df86fd1baa05d2b41fde1643f1c5d35cb" name="gnome-shell-extension-user-theme" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="88c6329dc2b7d877757c0e190d30a45987d51736c5f1116013c68835bbca81fd" name="gnome-shell-extension-window-grouper" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="c7ec08cdbcb52ffdad14ae2242413d4a2d8d7662042c3f4e6ab19d346c10a577" name="gnome-shell-extension-window-grouper" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="bcaadc8940c8adbcf08282f497c5624921c1962d9d27ea33cad8da2a256eb7df" name="gnome-shell-extension-window-grouper" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="20f0f0fa03aac419021cb13e25d50d3376f107a888209e4c4e97162eefdfff78" name="gnome-shell-extension-window-grouper" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="b6fa51f267c5539adbff4ba9cbec76d215a8d59be94e501d1c1b04293552b4cc" name="gnome-shell-extension-window-list" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="3c94da705dd7b14eb17e39398be9ea32ce727ca5a40e56ec7bc2164fe797b33c" name="gnome-shell-extension-window-list" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="2889324dcbf8f7f1db01b9def5fccaa581890dcfdbddf7f34572497fc67cda68" name="gnome-shell-extension-window-list" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="f68ffd33d319c3c5e1190cea57c0cb963805d5457d1038f6f523dda60dfb5be5" name="gnome-shell-extension-window-list" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="4599974097d7476d509e3274dd6ac35f0fe57e4ec44d4fd043563f2db9e3e3d2" name="gnome-shell-extension-windowsNavigator" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="b0826899f14aea9105d8064fdb1b9bfa7dbca6b09a73f19ec81aec5919af9500" name="gnome-shell-extension-windowsNavigator" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="9427abb1fae9d2a812a62b2c394cce3b94fc63cfdab774e72746ed097580b6dc" name="gnome-shell-extension-windowsNavigator" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="f5b21657f378b8ab22a2217e39aa5815db0a651f4b663baad93af03dcf60d436" name="gnome-shell-extension-windowsNavigator" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="56e1e808917e5fd1824796fb45fbc1e3be2cc400ae5ba0f00c429ea215890904" name="gnome-shell-extension-workspace-indicator" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="ef1711a31050596e04daadbb90e94b948c49b0f2e270421b8fb984ece7d55130" name="gnome-shell-extension-workspace-indicator" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="46ef8c2debdb1617781dc92252eda06fd2c2287e5f0e623662faa472951276fc" name="gnome-shell-extension-workspace-indicator" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="f41ba4e9d37b18fb8912a13776ced238aae42ba8654d54169358d9f5aee19b0c" name="gnome-shell-extension-workspace-indicator" arch="noarch">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="f5f5f216d15cdf82a10ad86df9e808ef52bd78e102cf4c2b3f3af04e997d3ff2" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="a1de844e7dc2c583d2a1dac880da62b3766fc8d2b48054ef4b304246ffa83af5" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="36e77553bdc62f17713df92ba18a495781a5d14fa0e7b2badc0203cae4394a0b" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="67f45f191817e7211eaeaf0d46124e5d48c1c353188b5528520ec6377eddbf65" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="0f0c61cb1542e5b80db90b8681dbf6428221c883cf5eda440884adbb5beec7e1" name="grub2" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="328124cbec0dc74ce430e453952fbb5085b7ac3a1868fc139c570956ec20d49a" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="563183da920cdc674288c9057355514bcc6a3a772883cb193312f15d1e4d0c1e" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="fb3c716c65d66d3fbe359e3657c201b945b659f166953c651572af25e7b8e7e2" name="grub2" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="daddf0a5794cd8df6b190e6c63dcdebedd73cd9059d31e51f614d1dfc5e2ae64" name="grub2" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="fd6e3961e8f0105e9d0a4b06cf07c0a914c5edaeca9bc56cc48356e58fa63240" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="4be70bbdd2720a2dd8c0befe991842d9f455f2db4822d873762cf73125afdc6d" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="b5fdf5846368853cb718282c9c6451eb92333c66b87126b91279ecf9ff15270c" name="grub2" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="7845c9589d99b7aa768e2db7e432b4fa73e58b11eb2f68bf59814aa324b0346a" name="grub2" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.2.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="c71cbeadf65ab4f92998214bf7ceffc0d7cc267073a5c24171be57cbeb6a5195" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.0.2.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="ccb1eff26196bb12ffc45a07a7d0d83c8a135fd09a468a9f94c8b3bad6a3b269" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="94725d7810d8a1e6022b4fa4a1d3da1dc06f11caac35a54c95427e3981697af9" name="grub2" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="0ef9f3ad18d26ba0814af4aac31ecc1377fbe08184c964f80224a3993687d3d6" name="grub2" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.2"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
</package>
<package pkgid="91004671568361c5ffcedd0fc5a3feb7d100a9d459b4f05a43595d2f4d11e936" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.2"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
</package>
<package pkgid="1ff02e9bf569b279537727b6094c7e6c29ba2b9eb81640a71d661f8693343a63" name="grub2" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="61e411bba8bea1378483f7c8d2a5e0b77e180f2cfb99538d4ec22dfaf6c57005" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="a3f9710e96072a462631f450e81075c78b571018439d9a32008915bd2993cabd" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="8f1781a4f2c0a23619bd75dd97d8408759ddd35c2bbbc844282a294b7cc9b1e4" name="grub2" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="f6b32fb2c2bd0b24dffab05b9a7107c68574efb541cb33f67671740ae673134d" name="grub2" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="fa4132f6226a319d2e1bb628b74fbf4111775878895bf577eab26f64970b960a" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="7913880c4f554edcc72fb9cf378bc6fb89c17fcaa6e09ceeec8e7bf58cac1434" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="9317b27d68b798168f110b4f9e818a8ed118f6e79bfd50225c430dbb907b5eb5" name="grub2" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="e75724c45c143b9688381e52468a1ef1186c69adef123546c000ae40335478b2" name="grub2" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="ef024c5ae1f12a5fea3ed8c1adb39a6c15db868930fec22d182bab099a2a6694" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="17887984477f122b5ed787d8d33fcf11ffff71967b4ba7eb79fa773ee033303c" name="grub2" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="e5feb4f8fd2b09411f7fbdb2590c456375b3136f8ccdc4ed74bd114da3553e4c" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="00a4ada222842bfbc7585bb9891b064e40aade1e5c9186a2a0f68af2fba4dead" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="13a4a1492a12c17d414cc405e9f18a3fbd59e0aa6b86d5cc57442ab940353e73" name="grub2" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="951b5784b3870eceecf4ec03a4e72cd7faec401cfbe9f043b34a1a4717db28d8" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="1f52e440c54b008ff02fac6d4e320221a96f27f2aa97f273023b4cfe8fa8623c" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="4134b32d35eebd4dbf7cf1bfe7c4ab0d6c954d63f29f9e45198af37f30b0e81e" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="a938859236f7238cec7e9a81715e58756f16120d02dbc59a7cd11e1e026d78f8" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="fad3a8200713980dbb5e59439c8964bf99c58ca46eeb1bd84644b31997f707a0" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="c5c585b2f2f9333417157c21384c6c6d1abb0d8a2a02cbf3992fd2a6f21900a7" name="grub2-common" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="b7f3c72dca8e8d6783f88b37d7fae75d78c3e5cc12cccfdaca204dea486f1e5b" name="grub2-debuginfo" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="f7406c28d4656fcb6a146815c26d1469dbeec13ceee0f780877736cf0bd7687f" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="5f68d3d760cfc73dafa4018e7018c2c45d82615be2a661f22d48ce26315fcff8" name="grub2-debuginfo" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="6176fe32dc2e44368cb78e0f8bc56c440ed608ba0847a3ffd180d69ff9763fbf" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="991c3bb266e51fa935fa5a88e9efd6c9406fd1ad37a96c2a49f75eddd0cb7808" name="grub2-debuginfo" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.2.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="61d664334f1a95db9c26b1be476fd83837a4953b4ac20bb26dcc85730b4e1adb" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="68e6f6d56ba9b6b8e277b5e822048ba967c13ae627fc83921220aff11db0a2ed" name="grub2-debuginfo" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.2"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
</package>
<package pkgid="2c0d76170713b23d7b977cafbfca12ac612c89c2071223fbc62b3dd362caa6d3" name="grub2-debuginfo" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="01491dfdb16429fb42fc6fe026e8fe25d09372ca406e1da87eb6fe82fbf303da" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="8ef4523aa99a7117ae41f6e27fa986340eb0ee638ab9672b25bd762692cddc92" name="grub2-debuginfo" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="fbd7d773dcca0cf4436b610173270134a0b952dc959d0eef347225ca9470c9a4" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="70cd078317d7cee1a74e93982752b9fcddcd0fbbdcd02c6fbe8ce2486e0bf2f6" name="grub2-debuginfo" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="0b0d4822537a972db105cd844349337fdbf5538ea7665e0f2a23688590ff1def" name="grub2-debuginfo" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="5e73ff31707adc6251fc1754aabcb6d2141ffaf8d2f2b84baad36948c1234bc1" name="grub2-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="c81034fd136be90d1e62d63d0ea538074b374d8b54b41541ef6341a60ca8a346" name="grub2-efi-aa64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="1be6298142008c45481a8e4b4a5874395484c7aae66a60a5d374c158c30963f8" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="cd465fb2ed663d90f9382579d1dbf96f44122c5fa5e53f650d7d7d2e9f701134" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="c6a819264ad06e70bbe9bb1f7c60551a300cdaacc0cdb13a17478568f74ad52e" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="831153d19c21cdc3fd5636d1e0f47f6d19f0ee116d6d2547a42eb6b000edf162" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="1a1784f9e6b460c1190ec109d2828e27aa7a47977f7dd2849df58fe6e27da283" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="381c36922a1127eee7dc6157f9a544a9dbf5f7eb5bdded5581036d38e8518ac2" name="grub2-efi-ia32" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="12ef1cd1e5f9d522ca292745f576e6b9b0b5867e6e58c1403fe72ed2d3797d95" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="835835f4709007257630c4c1736070b33f96683930eb5d7fa637cdd6bbd3d16c" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="6147d5e177350dd60d89106c5932f968fc2142f01cc83a8398f0e8c293474589" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="cbaad4b649bab522c4575db5c7aa4772864cc506d39fa9c36cbc3ef7698c7922" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="6e3339bdb8cee6f6fbfaaf0b954c8bf791c5a6aeb54740db896b7e8b254205f8" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="d2c87f4e7c71363c3211b22589c54111e07267a7f72c702d6f2a7281ea9ce970" name="grub2-efi-ia32-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="742f7e019c49a90e99051001f4dca7f6ed0d134d60a273e144df15e7593b9116" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="11873cba002b831c7f46d503d5c16d30f1186d1f70f5d95a33d78d74cbe8b881" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="20d230af1653dd820e6dd40c4dd4368f132cf669a194d00132e9252f49cc814f" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="9ad9e22d811bbd5a1dcad9f9a899900bbd0fed51a44d6a81352d77d3713d0d91" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="e0a09f5a155b17c52f52994db743b1b25c12f4f8cb3abe1f422e7e1c43ee486d" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="cd8de4f59a0176202ce705ef75b5f1aa27b6591aa8cf8aac39a1dda5a982b33b" name="grub2-efi-ia32-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="95392d84ec226fd140cb5e5888a6bbb24167849f97ac1eab2cd42177e5c6d298" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="73958a9bbbd8c9c1d35cb1659dd8b464a061f45c7a0955bd219d097cde50f30b" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="5f5c6fb6d5ecbafa3969952d68d3fb2b712962d67bdcaacc736351ca0c9aca43" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="653e910c8bdc7a170c7f65917b2a04bdd64541f0077c864c7d65e620ffaeb315" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="3e7264f84dd533127ca38738cb6da5bb64f5216a659bace7ec0383cda8c5c4d3" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="febf5bd2cf6629c4a2657e04ac09fabb3eaab3aa801f8881bee3edff64be4ae4" name="grub2-efi-x64" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="d4bcb792802376b72e2f0ff49bd9ba2fe775a6a469f450aa0c36e964482edfc8" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="428fcdc05573cb5936b750fd56cd52ed67e0f593e0048c8ff96889f8d9d4cbde" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="3227c048fd1849fb4fa2a4c1e2e7b50fdf97fdb79e757269f6d0522abd7cd668" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="dd8c2be5097d46ad27e609ad21cd17ad11a02182760792b321115fee8ed3bdfc" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="2b333f0f07f93bac8cd7fbfafaed135cbec51ac421f1b1e08de5aaf6de12a689" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="9d50bfdfd90abd692ba401c191beaf15a1a14c5dd7ecfa2ce7e37daa292d3c9b" name="grub2-efi-x64-cdboot" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="a27d44d9263e45746a77a0a79c63397a21dfb1fab07881eab28a7775dfc64aba" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="e24e1eed64621d5d0780d2302dbbe9c4ec2d3bebef64b9cfe0c3e2f114c8ef2a" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="a525fbce94147b90caea5e34a9e6601af1ba4d56b43f927dc5f0878ef030fbae" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="38050f02c8fceccfce541c797a3b482da43bfdcec6c8cd16e37fab7a5d8cfb8f" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="3328260f96fff41fec1460e736279c27b6a365fc494d882a8f0d2274a799505c" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="6092de31c8d5ad84a7a85ea94f1e52ede64134501f155a5460cc971b2a24dcb2" name="grub2-efi-x64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="005fef6aa5d47edf574f308fe660b343c6c95f389a45750d54fc0b93dc8837fa" name="grub2-i386" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="bc60e4bc7fe21e392546c78c87bb85204b2f8cb4fed21b5bd20c6b2d5b236aea" name="grub2-i386" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="83a2290ae46d32d1fa6e39db92e2754334337125acbc97e628176446e846e6aa" name="grub2-i386" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.2.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="d23d12a50df4ddacb4aee255ea705fdc0b02f108cd0c471619a36fdf567e6fea" name="grub2-i386" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.2"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
</package>
<package pkgid="28de4d029731746f833159ce3f74401ed7c4566d1a8f9703158cb6ea374c5a49" name="grub2-i386" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="e327383624681b9f80905a8b43227db271f6fb693dbab5273c74368c97f11852" name="grub2-i386" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="ec0bbd2da6bbb0c8a71058b55434b9034d18e130f92250505e384633bf6c5c17" name="grub2-i386" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="f007dfe174c49805a7de3d6490e435e9e17cd469e9389797456a28344dbb5cdc" name="grub2-i386" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="eec3ee9f317a55fccced1504b2a95c9d6f8eb1973b3eeadad051760d3a5afb00" name="grub2-i386-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="0c93afd98014c5ecd61ed213f698604f0405b77af32666691a7ebde28c5340f2" name="grub2-i386-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="236b2209ba7e27da52c1eedc183b1312f4f1aa61507ff1145e54cce78897bf33" name="grub2-i386-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.2.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="92e3cebac46b8b99baf023e7d4265d5333cb4f0df9a481ff8cf41819245987e1" name="grub2-i386-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.2"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
</package>
<package pkgid="b4a4fb02f28a8c33ca35cab43a9b6ae62bad527f41ac5a0c947120deed8b5357" name="grub2-i386-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="fbf079f90c7ae05a2b38a9418c4639c0efb5673d19392d2b1e494d74a4677151" name="grub2-i386-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="a5e38e7af8bfee49927987722a908126f3db406b7ff8d3fd9afb3bdd10ee2a7e" name="grub2-i386-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="94472e06f28f9243f1e55552d950698b73211195b9379e6bb9fca3a7416a0c3f" name="grub2-i386-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="541d7e27c2dd06db00c41d1c5253cf61b106f37cd82c91b9bc1d8f050c2f7226" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="636ad28f4e0dfa5c802cbfe1c891edce6102e5302ceff00e940f2ace15fc576b" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="c2477da4f0fefbc0c0e488031f4a10b51127d52c60f903407064f7d0e8d6508e" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="e9c3c54b6190a1a846105e953850a69e95fe7fb58f49daa79a79968b2dbfcd2f" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="969e201043f55415043fabf67f150ae49f6316a99c8d2fb5168308fff454a6f3" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="c46754108c737e0bd1eebc39ab0ee5878a46013c66149b7d53b9de943d572846" name="grub2-pc" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="17e35480b33910201353cfa70362c8fe63e5b804fe43f6dfe65eaba2999c6478" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="9ca399a4e2a9dd95ce9312aa85cc193133eaf845220b70ab8e2797ed8facc9bb" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="ff9c3f5b82f8b655a649223d03dcaf2ba1a820645e61e25a96a06391224fe31b" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="d16237253bb2a6847c5c5b7e3631445f2f0cd1c152a2d2801604850d3728803e" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="4bebbf410f9dee4a1cb0c9e5a46f72bc89eba90637f4669617dd6c87a3aa6cf3" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="881c7aa62c90575fbddf28ea8d7537d7e6b8fc8da57de77a641d721f916ed715" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="526b2f03f2497ab57d098b9590ea23fa44ec21f6c8b7b29bb88b0b3b56603ab2" name="grub2-ppc-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="2c1add38d653145dfa36f42f7a9cf641b9421760963e6271eab741c241fe9400" name="grub2-ppc64-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="b56fac4ff7235fc596ba6f72fbd2b4afbc3d797a66ba959eee33cbe5f2f9af45" name="grub2-ppc64le-modules" arch="noarch">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="059e9e7765a09ecee6f393fd3c6242032e68a538cc124e081a730e3b037189a6" name="grub2-tools" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="29cc22d5ab262e5670cd311fd50968f98993c96060671b035935cbff02d49d70" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="2136e0d890118e381fc1dc2c8e49bf75148fc2dd1bfc92b2ec465a4b82b7b455" name="grub2-tools" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="147d6853ec8afef1b47f2554a9657816be9d354e1531a30a9b6b5d00540eac6e" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="06e967d3e5c0ce72e13bbc7c0df450cb7cd104f795596452e7504d8127d82dd9" name="grub2-tools" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.2.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="e4cfcb8e310519bbc4d5796a6d54e420ee67286be636c0fcb72c2457f2112bb6" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="d9b91748d61e5324dce1de3801d818bac52853b9dfeb77e7fbcfe1a2fa56e1f9" name="grub2-tools" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.2"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
</package>
<package pkgid="76dea255a5d430baf7a52ec84f8ee400dd3a2a23ea77fbdcac5b6410fe4d2141" name="grub2-tools" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="8d813d041e7dbb119eb70a8d049d9965ca302769d2a0dd3ce3d3adfaa8246248" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="18ea9a1503ce430823da379e0c6179d9800a75b12af9edcd89b6fb49d1d6178e" name="grub2-tools" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="35bb6d22f1d28d4d4d3c8ead6eae67e3a74480a9682d30e3b1ec3af73194c3ec" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="7ee80e459a72eced53b8282b45a603cddc373ce739b79e22d5bf12de5b882ee1" name="grub2-tools" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="a34378b1838a0eca6bd929aac90007ccaf9461056118e2f385e6357561a4a4f1" name="grub2-tools" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="7d8b59a72bd5f8c53776bfca6daca07d78f17e802ec8d0a089638a9f2d8b6224" name="grub2-tools" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="e2d90857c006b2b43831068a6e299bbcf2e2ade8c0a425ab08a7e677c249ade7" name="grub2-tools-extra" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="8f32c7dfad4c576ec6a9a5527206e409fd5903e078f92402dc9a939cb1ab3eec" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="a0b82fd0c835c891b213b50a099380d85eaa802989f0b593de1719de11b5b2e7" name="grub2-tools-extra" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="197f5a77bc21e1c4118bdccdf98fc2c9a0616740fb821504142a30120094e6ff" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="f45a5bcc2d8d84cdba2a8e2b4b6e96c428b23897787bb56c32248b629bcda5fa" name="grub2-tools-extra" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.2.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="4e2164c8790804ece2a1eb36b46a77cd8d802f0ec026dd7b536e8953af84b516" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="139e2db6c3f23e6fa8049287b77711451aabd6dac88be1cb3d814f1d0a0e51c1" name="grub2-tools-extra" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.2"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
</package>
<package pkgid="53a615ecf298f060cd2c72d0101a4e46a0f77625cb9cd2c27ba0af53a5a0796e" name="grub2-tools-extra" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="b7c2f05791eb2f8295ce08d378aa352693e9e63a364046bac37ed0f113c97ca0" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="513e45353732c1e810baf2b4ac2f64c09c48474b77a2f51e9aa04a68cee706ed" name="grub2-tools-extra" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="89f66fa0a3e36b029685435953603e085f57216f4ac40a9db9286518ce06aaa6" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="c2fd614319f7f9569cb522240ea1db12644ff3d285fa238c6f43d806931c432b" name="grub2-tools-extra" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="c0323fa9a19d76a2e9463e45bf569482bec5d6671d99916a03803ef6d9d19ca5" name="grub2-tools-extra" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="e286de31419b292ac16f105c4ac60c645e4797a4ce6f4041b9334a910fa05410" name="grub2-tools-extra" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="926a7091cd14c05396f8322ec9ef77370b463619826d74545b37f043568f3280" name="grub2-tools-minimal" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="7fbfe933eb661cad75dbf0070fca20ca59ecf813b4baf4e8d79e3364969eb70a" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="b00fd2f13c1fd411d8a65c07df3189d170ace8dda64936b0f6eac85336497f6e" name="grub2-tools-minimal" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="6723efd01dcbc96a71021161bec388751f5a98fc4eb0078f16121a5d074521c7" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.0.1.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="05db27e08d0a1d84c8f70064e625ecb8419f51cfc89702114ffd8c3d2b038c0b" name="grub2-tools-minimal" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.0.2.el7.centos.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="6ace123a700230edd268a487723d3dc88ea8c454afad702469173e070febef35" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="8c9283da73c72cbb7ae7d52298da74d415eb95267bd8d7c869e8248b7cb26206" name="grub2-tools-minimal" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.2"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
</package>
<package pkgid="19034c15d6988deb8124c80ab3b99bf7664adabd1a0e055a179f27eb600a0c1a" name="grub2-tools-minimal" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="944d5b3a9850669a7ce589d8adea0cd7654bf59da99d624ac0f305fe39dbcd4e" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="16a5df15aa8ab2b9d3b690fad378a9a54a78d408fee5cd6b1eb0b6aea830dabc" name="grub2-tools-minimal" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="834bdddc912fffce7dba0f307f543da28e972c01546c8ce496b3f988ecaf0555" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="1cbb691b3439da65488bc71bcb62100b7e476cf259299c0d9ca4226c41ee0417" name="grub2-tools-minimal" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="611ff8b4c665c1fc184033591946bc25575b6c5b49ba65d403ba3eee6ba24343" name="grub2-tools-minimal" arch="i686">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="b013699e5403b337becc52fb41d77de15e0f8a3d5a92d80a7b07a1ba0e30f66c" name="grub2-tools-minimal" arch="x86_64">
  <version epoch="1" ver="2.02" rel="0.87.el7.centos"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.78" date="1553083200">- Prevent errors from diskfilter scan of removable drives
  Resolves: rhbz#1446418
- Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
  Resolves: rhbz#1497918
- Remove glibc32 and glibc-static(x86-32) BuildRequires
  Resolves: rhbz#1614259</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.79" date="1553601600">- Ignore the modification time when doing RPM verification of /boot/efi files
  Resolves: rhbz#1496952</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
</package>
<package pkgid="31cee4757f4353367b92ee7d696c7470edd539576c2101b66b735776a1d3bdc8" name="gssproxy" arch="i686">
  <version epoch="0" ver="0.7.0" rel="30.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-21" date="1528459200">- Always choose highest requested debug level
- Resolves: #1505741</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-22" date="1544529600">- Add hack to support read-only root
- Resolves: #1542567</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-23" date="1545048000">- Use pthread keys for thread local storage
- Resolves: #1618375</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-24" date="1552910400">- Add a safety timeout to epoll
- Resolves: #1687899</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-25" date="1556625600">- Fix explicit NULL deref on some enctypes
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-26" date="1556712000">- Avoid uninitialized free when allocating buffers
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-27" date="1563796800">- Update docs to reflect actual behavior of krb5_principal
- Resolves: #1553094</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-28" date="1568894400">- Fix double free of popt context when querying version
- Resolves: #1752810</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-29" date="1586174400">- Make syslog of call status configurable
- Resolves: #1373421</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-30" date="1621252800">- Always free ciphertext data in gp_encrypt_buffer
- Resolves: #1887438</changelog>
</package>
<package pkgid="54576294105c7b71bf86123b8a2a54e32e93d885a02df3ab40d3b7ce79329e15" name="gssproxy" arch="src">
  <version epoch="0" ver="0.7.0" rel="30.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-21" date="1528459200">- Always choose highest requested debug level
- Resolves: #1505741</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-22" date="1544529600">- Add hack to support read-only root
- Resolves: #1542567</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-23" date="1545048000">- Use pthread keys for thread local storage
- Resolves: #1618375</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-24" date="1552910400">- Add a safety timeout to epoll
- Resolves: #1687899</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-25" date="1556625600">- Fix explicit NULL deref on some enctypes
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-26" date="1556712000">- Avoid uninitialized free when allocating buffers
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-27" date="1563796800">- Update docs to reflect actual behavior of krb5_principal
- Resolves: #1553094</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-28" date="1568894400">- Fix double free of popt context when querying version
- Resolves: #1752810</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-29" date="1586174400">- Make syslog of call status configurable
- Resolves: #1373421</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-30" date="1621252800">- Always free ciphertext data in gp_encrypt_buffer
- Resolves: #1887438</changelog>
</package>
<package pkgid="a07b07dfb588b86c1904136082d151566ef25ed629ebca5a40ef751d94ab7a83" name="gssproxy" arch="src">
  <version epoch="0" ver="0.7.0" rel="30.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-21" date="1528459200">- Always choose highest requested debug level
- Resolves: #1505741</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-22" date="1544529600">- Add hack to support read-only root
- Resolves: #1542567</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-23" date="1545048000">- Use pthread keys for thread local storage
- Resolves: #1618375</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-24" date="1552910400">- Add a safety timeout to epoll
- Resolves: #1687899</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-25" date="1556625600">- Fix explicit NULL deref on some enctypes
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-26" date="1556712000">- Avoid uninitialized free when allocating buffers
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-27" date="1563796800">- Update docs to reflect actual behavior of krb5_principal
- Resolves: #1553094</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-28" date="1568894400">- Fix double free of popt context when querying version
- Resolves: #1752810</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-29" date="1586174400">- Make syslog of call status configurable
- Resolves: #1373421</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-30" date="1621252800">- Always free ciphertext data in gp_encrypt_buffer
- Resolves: #1887438</changelog>
</package>
<package pkgid="1a9860122c41d196c23d1063e637f292fb5a3a80551fed67e67ad87b3278fc97" name="gssproxy" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="30.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-21" date="1528459200">- Always choose highest requested debug level
- Resolves: #1505741</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-22" date="1544529600">- Add hack to support read-only root
- Resolves: #1542567</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-23" date="1545048000">- Use pthread keys for thread local storage
- Resolves: #1618375</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-24" date="1552910400">- Add a safety timeout to epoll
- Resolves: #1687899</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-25" date="1556625600">- Fix explicit NULL deref on some enctypes
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-26" date="1556712000">- Avoid uninitialized free when allocating buffers
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-27" date="1563796800">- Update docs to reflect actual behavior of krb5_principal
- Resolves: #1553094</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-28" date="1568894400">- Fix double free of popt context when querying version
- Resolves: #1752810</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-29" date="1586174400">- Make syslog of call status configurable
- Resolves: #1373421</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-30" date="1621252800">- Always free ciphertext data in gp_encrypt_buffer
- Resolves: #1887438</changelog>
</package>
<package pkgid="5367323386039de48e4ccc968423b0e8f00889a5d955db97290409afbdc2db33" name="gssproxy-debuginfo" arch="i686">
  <version epoch="0" ver="0.7.0" rel="30.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-21" date="1528459200">- Always choose highest requested debug level
- Resolves: #1505741</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-22" date="1544529600">- Add hack to support read-only root
- Resolves: #1542567</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-23" date="1545048000">- Use pthread keys for thread local storage
- Resolves: #1618375</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-24" date="1552910400">- Add a safety timeout to epoll
- Resolves: #1687899</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-25" date="1556625600">- Fix explicit NULL deref on some enctypes
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-26" date="1556712000">- Avoid uninitialized free when allocating buffers
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-27" date="1563796800">- Update docs to reflect actual behavior of krb5_principal
- Resolves: #1553094</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-28" date="1568894400">- Fix double free of popt context when querying version
- Resolves: #1752810</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-29" date="1586174400">- Make syslog of call status configurable
- Resolves: #1373421</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-30" date="1621252800">- Always free ciphertext data in gp_encrypt_buffer
- Resolves: #1887438</changelog>
</package>
<package pkgid="6fade06fbbc3a0778b8f1666d92fd4a5210f92ae51e23d2b152488266ea4192c" name="gssproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="30.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-21" date="1528459200">- Always choose highest requested debug level
- Resolves: #1505741</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-22" date="1544529600">- Add hack to support read-only root
- Resolves: #1542567</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-23" date="1545048000">- Use pthread keys for thread local storage
- Resolves: #1618375</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-24" date="1552910400">- Add a safety timeout to epoll
- Resolves: #1687899</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-25" date="1556625600">- Fix explicit NULL deref on some enctypes
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-26" date="1556712000">- Avoid uninitialized free when allocating buffers
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-27" date="1563796800">- Update docs to reflect actual behavior of krb5_principal
- Resolves: #1553094</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-28" date="1568894400">- Fix double free of popt context when querying version
- Resolves: #1752810</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-29" date="1586174400">- Make syslog of call status configurable
- Resolves: #1373421</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-30" date="1621252800">- Always free ciphertext data in gp_encrypt_buffer
- Resolves: #1887438</changelog>
</package>
<package pkgid="f3b470ec10d8fbed8f609962ceb61bc31f82f18e08e82cfe4623533d3ee91081" name="gstreamer-plugins-bad-free" arch="i686">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="f90463218c356b125a58c2e8ec4f888b3324213628f8e4b0ec4ba695d0db9743" name="gstreamer-plugins-bad-free" arch="src">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="72451630c913f73c5349bcb3c4b6a3f473f4be221687c8949f1698d7f61ce936" name="gstreamer-plugins-bad-free" arch="src">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="10c6da91bd6a61f36065f6fb3552b84e8eb2d996e03f5dfa167450409277dad2" name="gstreamer-plugins-bad-free" arch="x86_64">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="6b36015ab5ff852fd9ec0929b98377bf84b1dc6740f35a4bcdbf9c7bfc53064b" name="gstreamer-plugins-bad-free-debuginfo" arch="i686">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="743ed1c18af2738b33553512ff5e750c0cadc2a46d5001819a71f49c090362c6" name="gstreamer-plugins-bad-free-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="d7b7cbb0cda1330fc8fd6a202129ba366b29d1ff9a438b69d74940b7447f2fb7" name="gstreamer-plugins-bad-free-devel" arch="i686">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="bd2716aadc576715a2efeb2c6e4e6fac7a4a5b4c943872f0a2d1ea271f7f29a9" name="gstreamer-plugins-bad-free-devel" arch="x86_64">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="a4c562f0729ab0e310f3b481aaf1d7880e3d5f6e410674c8f177a0f85359bcce" name="gstreamer-plugins-bad-free-devel-docs" arch="i686">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="b1d8b11c5ecaef5957ad1a022abf0a70d7fbb31202ab7e8cd4063ab2c753acf6" name="gstreamer-plugins-bad-free-devel-docs" arch="x86_64">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="b0a21e30fa7f311c609a8887bcc12c72c2993d2bd7b03ebc3f22ada116c957c7" name="gstreamer1-plugins-bad-free" arch="i686">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="d0419c5cf11f6c259236d75f3e8216d6c4fa969c2e0b858c24bc5a1f8a9b3f47" name="gstreamer1-plugins-bad-free" arch="src">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="b81236b9e82e5116bac5853a8459c631fed3e281ee1ae13d637ddd1665264f5b" name="gstreamer1-plugins-bad-free" arch="src">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="7d872e680b771fb8e91f4e977e0b092ca5ab3c4625c566b5a0bb18711fcb1b22" name="gstreamer1-plugins-bad-free" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="eb55a624e326ad32789703340c6d6a6e06b45b1024fb5d67bc98a6a953a549c2" name="gstreamer1-plugins-bad-free-debuginfo" arch="i686">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="64c4f0f06130452991be9dd6b7605d69c3c1a741c3d59d4b91ac1375737b20b3" name="gstreamer1-plugins-bad-free-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="1939d51feeb98d2a1b234de2c47da30f361a43fc207705f0fa7e78db5d99dc58" name="gstreamer1-plugins-bad-free-devel" arch="i686">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="4520ab74c3ff4369de1dd10f81b6367b12f2a51e95c0a1fcca1722bac56a8c68" name="gstreamer1-plugins-bad-free-devel" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="4aab10675e4218b2fc440e3655b931462dca38f27d094305a1533d53cf7e5274" name="gstreamer1-plugins-bad-free-gtk" arch="i686">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="7c68759b78335ee297793ddcde76e8732030a2b17c3f8f1feb90079b47caf969" name="gstreamer1-plugins-bad-free-gtk" arch="x86_64">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="5f5bc50bbd976f41d6d320230a917924c1082873268888bfbd2fcd55fd3b9710" name="gtk-update-icon-cache" arch="i686">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="d58347466b8c3b5d53ed7db29545b7c5eaa212e36418a824b6ea30546c1b826c" name="gtk-update-icon-cache" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="4546c61f716096d5d37bd6c1ba549ba4e175207b74e2616e48e06f45f0385429" name="gtk-update-icon-cache" arch="i686">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="f01feca5ebc8823901fc3ef1015149276c65bb1fdbc74fe59a60e74b64b333eb" name="gtk-update-icon-cache" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="b1cc03b8f870878ccda2420bc42f494e2204ada5f2e6fddf7a2d14d9b4837e50" name="gtk3" arch="i686">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="6c7eb67e39b71b67aedeb2052e8228854469a425367097bc7962efe2234138f3" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="3b3f3b8ecbc3d08254dbeae87eec7ea642d326ade197fbfed6a4c2d3ab7f3018" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="88211bab9f958f9c34941145dd841e4a298628a0ce81cf594d8cda93ce39c43d" name="gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="3c0230c446f6d1615e2624d88f63e32d0f3a419e3bdd68601126eb4a21aeb6cd" name="gtk3" arch="i686">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="c0f4d1a288a77e6be6779482d202316e9ba1ee1f21f9f849134573e6d7ea38f2" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="45dfaa3c72ea2f543a5e5069361ad6be3039644c5e63ccd83fd22b6bae1be5a1" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="30ea13e13ccb45c88be3c69f81e03881e00f2b05798823a52210443a40d121a8" name="gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="b500ae61c166d7331e26f8cf57b9a13ca3d3c2640963f3cb645accc750622c1f" name="gtk3-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="03e94b89e6d1fae7662651d719149b962e61893b7c99912e2a5dd4646aa79be3" name="gtk3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="277b0239841bbd8be7edbfd3f7be809c40c438659e92f1d93e2a1e93e05e70d4" name="gtk3-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="315a5536a06db3d36536f27b4ed4fe6ea751a0929545cf35a60106390da5e820" name="gtk3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="5b3894c0da42effc9c91a0b9e9d8ee3e81906326c20c73bea48b5473b4472c00" name="gtk3-devel" arch="i686">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="6633886350f44c1913ca3de80269bac01515782023de4a701620b4510e1ecc90" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="7c258a4620abc85563bb8d61d8cb1ed5d0c9ffce917f7ab207c1a59d86f8cbd4" name="gtk3-devel" arch="i686">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="6b1f0d739e406636ea84e97f25b25e2150db4cbfe34d8b406b073f51c5508723" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="6e8e299d105b5151badca9234ce3d6f63ff15be4ecde8cf5526a8536ca79e598" name="gtk3-devel-docs" arch="i686">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="47d9e8033d0fd94126174222a2a4c35ca8901da659576d958e454cbbc722d5c5" name="gtk3-devel-docs" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="ccbe41cff116684cb03ac307dbe96d407b3291e3d707a0945a421349861bd7f7" name="gtk3-devel-docs" arch="i686">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="a02fa26305a0bd84a8068e13b8990ddff72d2bc23bf8d3c9a7c16ac69cfe7e60" name="gtk3-devel-docs" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="a588d31cfd75657409391b0efcd7aa263f94531ef922beeb1cbbd8b6d85bc1a5" name="gtk3-immodule-xim" arch="i686">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="537068c876de04094e89f243ad6ee0169475e56154bb6a8f9c273f7cc478e212" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="72d524e688252f0b8471e41f904b829af4e770fb920836f4bae94feb98591c3e" name="gtk3-immodule-xim" arch="i686">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="f328907eca545add6acf76d3454f7223ff871695dc34e14a256afaac50c40e83" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="425c7b21706e6b5a84f6354649fd2d5f69ec06f20d1c2774ce5d57f45c9ed733" name="gtk3-immodules" arch="i686">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="7502b5fad8c8bf5b1ac14c81fb24c7bf3fea8c397e4b109397bb8e8ecd3a271d" name="gtk3-immodules" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="1bb1ff058c413d37644f8de28a83d6415e9738a77db23943f3cf167509feba4e" name="gtk3-immodules" arch="i686">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="7b4e6f47257cd91b227ca1b5f4d492ce3de10c9c0b0a86b183b70e0acaf9ed4e" name="gtk3-immodules" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="1510b0201599d70fd2ed1e6c9f30c3d0d78da770a0c8d53484b33c8e78612e73" name="gtk3-tests" arch="i686">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="a5c2b0baf4f5314ce14452997a9e4e67c33115f33ad65cf673caccda4c17aa41" name="gtk3-tests" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="322ca476a8c3890f4afb18b296811195e980d8dce8f9e3fc0b89434a0cecb3e0" name="gtk3-tests" arch="i686">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="c17c44aa219c09a6a1cf52e43e6cc156c6ca9696d4c6ca1aaa18844ad335e1b7" name="gtk3-tests" arch="x86_64">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="504349080b3b67bd46d88e91e4b13c8a826e7864a58a17db4213c48c76c0130b" name="gupnp" arch="i686">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="4055004e55f95dcd14675f200cfd0550e4f24bc437f347c6adc26711814becb5" name="gupnp" arch="src">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="dd115fa3dabb30a0b9f11a4a472b3f3dcc36852ed6d62ff61ea446937e0fbbe6" name="gupnp" arch="src">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="533302805594e10409dc2719294ed049d9b920c2d29d785d95e5f2ebf1b8a4a8" name="gupnp" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="ee74d64be6b83a3163ff57a6991e7f1be9d13ce909601f9a766c37fb539e43b5" name="gupnp-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="f0ce4cd75307915e5896ef1a69ad4190feec415523a11d9ce8771c1cdc6dd842" name="gupnp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="186b98c7c91fccb62798beb21990cbb349c608a25e5f307bcbbdb1a8a190e36f" name="gupnp-devel" arch="i686">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="fbb2d680845dbbeb0f9a167ffacf4148cf4593d39a941b2cfef86a7c0dc2c16a" name="gupnp-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="678966f861283de69cdbce6caae5645ab50ade53c8fe027d4903e67a8fdfb0d3" name="gupnp-docs" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="2b4e1b4496d50dc2d0142ccf8273f3fc77b27ef8ef45816dab8f8a977bef38bc" name="gupnp-docs" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="4001de4b92a8ebb54bd5e04685e13bc04738bba18b3feca5da66896a65c559f9" name="gvfs" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="1d8441ccc744a6ffde399f87f489dc2102bb81b4106fa97acc635250aad6a4a7" name="gvfs" arch="src">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="f5feb2a4fa869553931221a0bb9da355900acd1479920bc85bf066a56b59c2f4" name="gvfs" arch="src">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="1998b4473b330c2260ced512d1907ea86c8701d674f9705478329a6e9b91227c" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="01ea54c279b20727c8bed3f0866f815d9f3d325640ec7e8d1713458a994f745f" name="gvfs" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="8945f64b511982ec8e695ab98b82ce9aba4cecabd82ef226941c40b0b071fe0e" name="gvfs" arch="src">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="b995204a8c2df4b7ceee534a8b7346853f0332ad7fc1f60ce91d3a164e4f01c0" name="gvfs" arch="src">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="9e83cb4155cf3e089493ee638fdbe6fc9f5c507cabe5b5f0f09eb7f9d8fb07a2" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="81fc501be55a9cc961c3d3c9fd5ae703497d4e1279b74a09ce916fae06ea28a0" name="gvfs-afc" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="407ab5f74d268be26b03f19334ae68b78566c7201fdc27ae23f7f2d2502d3d11" name="gvfs-afc" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="e8501c155713fc938eeb81e46607fce0c8e9aec9ff779537d22efc43a4b70cb8" name="gvfs-afc" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="bcb404a40e7ed81b38893f8c7c1793ec5b422185f65896ee9706c94541770f2d" name="gvfs-afc" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="e8267fb8b37f7db35f5104724db47e09baf3ad27544b63f3af2dd5ae82cde7dd" name="gvfs-afp" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="7767ce4644b2b2340cff7cf1bb79c4e948e20050a59db31a0ba0195cdee44ea0" name="gvfs-afp" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="fb555c7066567452839255f2374ce97fbc7c4b53ac6d68dc6f85f4ba18c94cc9" name="gvfs-afp" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="992487b731fbef3d0d288b8767ce235b504e3c267b963384d95fb98cc810334d" name="gvfs-afp" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="ab5f9a7581d234b779f9938fd2e4883b6e58cdf11a305f516baf8609239da943" name="gvfs-archive" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="be22524cffb16e8933311ef03e1a53c3bc44ed8d7b0222b9d94cad5e64831943" name="gvfs-archive" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="69f939f63a82944e80822da5e38e702ef3d505b7711a438add2caaad4314b18b" name="gvfs-archive" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="dacbb1f4beb3c3ff662b131f11f37000d6972774d2427dec4e4918a49ecc6f72" name="gvfs-archive" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="cad0828f51c9c4cf14f5a62e4b27dbb99604a9a044828196d03ccdd5f3d611f3" name="gvfs-client" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="adbeb871c951915845710a522872b236a1d576e0dfb21c9721d9fa9d90949bb6" name="gvfs-client" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="24e60c9f29e49eaf7629ba44b587a2574eaa8cd00f99e2ff7b12b7bfd14c9679" name="gvfs-client" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="3cf109aae90203deb25bdd4babcbdd72ee348648d6f55cad3361a41b4c774e6f" name="gvfs-client" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="1fe49277d649c6d6905152a7d432c2d421a68a3746b10a6b89b4b2e8655348a6" name="gvfs-debuginfo" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="79f74dfe7074895fc528b996559f5a79ca930d6fa4df607e7972d0c13b3e199d" name="gvfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="e95f95007173918945fe35d237bf1f63e11c2dd441181c055dd03fc10e60b2a0" name="gvfs-debuginfo" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="f08d368ccfc953ef0f248a734195e6e9343e3fef525e6f16c981b794ac77bad6" name="gvfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="f88433cd015c23868fa39599c3252fec9b9cd4130c0ab43755126fb8456ea431" name="gvfs-devel" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="21236bd13ca2c3f20a914cd9c89b6428675b9cb6a59bb3f221eddfc2efca18ef" name="gvfs-devel" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="7437c0938448062747e9b501775170c54348111f9a7855119748212826a65d32" name="gvfs-devel" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="924ed226f5fbcf2862af7f122dc25856af8c8635dd66d0c7f46d8051240e89a6" name="gvfs-devel" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="cf0b7714c4fefbf871ca38ed01a3922f3dc0d2187afae70140765bc7fd2bead9" name="gvfs-fuse" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="ee18bfb422080dbf8b1345afdd2ee7fee8d9eb630317e7f0259e0b2c36eec5d8" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="6955ac0f7b28db1c50eb6f2b28874952c767baa235d5c07762f46f13f8a84d79" name="gvfs-fuse" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="5ddb8ccc7cae5d3dca3fa11e2d8d081f1fd7269b52d0aef5d32ff161264d180a" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="a8bd640a2b876218d7db33b47aef4d7e0e4f326d17081903d8fbed168adb8c27" name="gvfs-goa" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="99cc9ebd0fcfc1dbc2986db5a278c86702032c047ade0a7f772c6153283ff87d" name="gvfs-goa" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="c954502ebd0fa527eb484b2c15b5f04ebd12d806b24c012412f29f3292bbf21d" name="gvfs-goa" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="a690e5a1297a1873eb4587e2d328bf75db9f8f1ca707ea31463333f9ae1f0da2" name="gvfs-goa" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="f5de39edc92ec51e7b275ea1a7f2b8f71f381785101f363958c986e275d7406f" name="gvfs-gphoto2" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="7c7124a0b41f46b9a3343f6072b2081ecccb7f6182a378d4cc64b8d6b3a4857f" name="gvfs-gphoto2" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="6e9abaead1b4c62f847e0810123c1eb615cf694bc4dbbe24f224710e85c48ebd" name="gvfs-gphoto2" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="da0b938491878da2c951922022014d05c3547684a98ea80c78ecc4f67ae7f578" name="gvfs-gphoto2" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="af873f1de0b18dce0bdb06f769ec96279a43ed297fa489530b455cc4596e8b24" name="gvfs-mtp" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="7e64d8dffbd0ae0242d9ce633eb2134ae338ac4d31de0e7ebd432f5f73eda6e3" name="gvfs-mtp" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="bc8b22e9f79c938dae1ccbe49b47ad0f74aa6965d76f04ffa9f1e256740be112" name="gvfs-mtp" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="e92b6a0f265cdc717874efcf1d4ea28c9ea8a206a1d430a45633361c9dbe6478" name="gvfs-mtp" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="6e6ed03319089bb97ff625268b06687ded361bf271e445efd0841f22e33842ad" name="gvfs-smb" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="4a54efb60bfa02ab2a55e50384e848f8ea170f72233bf03ded21f51566b60b88" name="gvfs-smb" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="0d8e4ac95a333c776db5188c5863118c58772d6f0b49d0a45c2f264ada4e126c" name="gvfs-smb" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="3ec07f5ccb5202697842bfbb7ca818a45df122e2cd77210d32d80979568c3bf8" name="gvfs-smb" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="c962a7c789cbcb638c4c5bfd57d8e12b37fa5cd97092dfd7c6ad5b8de5c3764b" name="gvfs-tests" arch="i686">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="7e2779e75bbc65e2ba43d54bea87f628530dae312109ec06981e6f16a05733bb" name="gvfs-tests" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="7457563e8b151c888f3647f09e0c65e5a8f9bc9b11402f42fe9c3d928e103f1d" name="gvfs-tests" arch="i686">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="d4df8ec7d997211087782be604e735786770d8787f1f8adc58e356b3cf5a8681" name="gvfs-tests" arch="x86_64">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="a7c2cb584abdc652f2e8cd911d924a3383327e6a53e555eebbc3215624fdb416" name="gzip" arch="i686">
  <version epoch="0" ver="1.5" rel="11.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Drake &lt;dsd@laptop.org&gt; - 1.5-3" date="1352808000">- Fix "gzip --rsyncable" functionality by removing a spurious blank line from
  the patch.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-5" date="1384516800">- fix issue with nonblocking open for PAR and OFL file
  Resolves: rhbz#1028052</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-8" date="1426507200">- Gzip overwrite existing files when user choose "no" on yes/no question.
  It's due to wrong dupicit declaration of yesno() function in gzip.h
  which is compiled wrong with -O2 option.
  Resolves: rhbz#1201689</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-9" date="1488283200">- fix zfoce
  Resolves: #1382054</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-10" date="1505131200">- doc change: missing grep options are now mentioned in the zgrep 
  man pages/help message
  Resolves: #1437002</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-11" date="1650369600">- fix an arbitrary-file-write vulnerability in zgrep
Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="445d34d21d59db8c711989bce82d9f6b2b0e39b5e01eddcc05b67cc3ce62ab03" name="gzip" arch="src">
  <version epoch="0" ver="1.5" rel="11.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Drake &lt;dsd@laptop.org&gt; - 1.5-3" date="1352808000">- Fix "gzip --rsyncable" functionality by removing a spurious blank line from
  the patch.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-5" date="1384516800">- fix issue with nonblocking open for PAR and OFL file
  Resolves: rhbz#1028052</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-8" date="1426507200">- Gzip overwrite existing files when user choose "no" on yes/no question.
  It's due to wrong dupicit declaration of yesno() function in gzip.h
  which is compiled wrong with -O2 option.
  Resolves: rhbz#1201689</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-9" date="1488283200">- fix zfoce
  Resolves: #1382054</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-10" date="1505131200">- doc change: missing grep options are now mentioned in the zgrep 
  man pages/help message
  Resolves: #1437002</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-11" date="1650369600">- fix an arbitrary-file-write vulnerability in zgrep
Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="8d753d1362b7104b4cc5ea620a4e8cfa7fab632b5b9e6bba7109232683c64f76" name="gzip" arch="src">
  <version epoch="0" ver="1.5" rel="11.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Drake &lt;dsd@laptop.org&gt; - 1.5-3" date="1352808000">- Fix "gzip --rsyncable" functionality by removing a spurious blank line from
  the patch.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-5" date="1384516800">- fix issue with nonblocking open for PAR and OFL file
  Resolves: rhbz#1028052</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-8" date="1426507200">- Gzip overwrite existing files when user choose "no" on yes/no question.
  It's due to wrong dupicit declaration of yesno() function in gzip.h
  which is compiled wrong with -O2 option.
  Resolves: rhbz#1201689</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-9" date="1488283200">- fix zfoce
  Resolves: #1382054</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-10" date="1505131200">- doc change: missing grep options are now mentioned in the zgrep 
  man pages/help message
  Resolves: #1437002</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-11" date="1650369600">- fix an arbitrary-file-write vulnerability in zgrep
Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="38855f71a59f0f2a3b47faa76518e4b1c828ea7145be358992b54d86bc61b628" name="gzip" arch="x86_64">
  <version epoch="0" ver="1.5" rel="11.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Drake &lt;dsd@laptop.org&gt; - 1.5-3" date="1352808000">- Fix "gzip --rsyncable" functionality by removing a spurious blank line from
  the patch.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-5" date="1384516800">- fix issue with nonblocking open for PAR and OFL file
  Resolves: rhbz#1028052</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-8" date="1426507200">- Gzip overwrite existing files when user choose "no" on yes/no question.
  It's due to wrong dupicit declaration of yesno() function in gzip.h
  which is compiled wrong with -O2 option.
  Resolves: rhbz#1201689</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-9" date="1488283200">- fix zfoce
  Resolves: #1382054</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-10" date="1505131200">- doc change: missing grep options are now mentioned in the zgrep 
  man pages/help message
  Resolves: #1437002</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-11" date="1650369600">- fix an arbitrary-file-write vulnerability in zgrep
Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="f3c4e09f9553384fec1215cc3578b4feedd44540d8aed49387b9a922d6126924" name="gzip-debuginfo" arch="i686">
  <version epoch="0" ver="1.5" rel="11.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Drake &lt;dsd@laptop.org&gt; - 1.5-3" date="1352808000">- Fix "gzip --rsyncable" functionality by removing a spurious blank line from
  the patch.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-5" date="1384516800">- fix issue with nonblocking open for PAR and OFL file
  Resolves: rhbz#1028052</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-8" date="1426507200">- Gzip overwrite existing files when user choose "no" on yes/no question.
  It's due to wrong dupicit declaration of yesno() function in gzip.h
  which is compiled wrong with -O2 option.
  Resolves: rhbz#1201689</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-9" date="1488283200">- fix zfoce
  Resolves: #1382054</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-10" date="1505131200">- doc change: missing grep options are now mentioned in the zgrep 
  man pages/help message
  Resolves: #1437002</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-11" date="1650369600">- fix an arbitrary-file-write vulnerability in zgrep
Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="68099c10e372f83d24b4ab182efc7d6301b33b818c1e91061cbca0d421a2fb77" name="gzip-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5" rel="11.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Drake &lt;dsd@laptop.org&gt; - 1.5-3" date="1352808000">- Fix "gzip --rsyncable" functionality by removing a spurious blank line from
  the patch.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-5" date="1384516800">- fix issue with nonblocking open for PAR and OFL file
  Resolves: rhbz#1028052</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-8" date="1426507200">- Gzip overwrite existing files when user choose "no" on yes/no question.
  It's due to wrong dupicit declaration of yesno() function in gzip.h
  which is compiled wrong with -O2 option.
  Resolves: rhbz#1201689</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-9" date="1488283200">- fix zfoce
  Resolves: #1382054</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-10" date="1505131200">- doc change: missing grep options are now mentioned in the zgrep 
  man pages/help message
  Resolves: #1437002</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-11" date="1650369600">- fix an arbitrary-file-write vulnerability in zgrep
Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="41d2a88178070b3ceaad2275a19f2efb10819b019c256ed79db37bc46339872f" name="haproxy" arch="i686">
  <version epoch="0" ver="1.5.18" rel="9.el7_9.1"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-1" date="1465992000">- Update to stable release 1.5.18 (#1344012)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-2" date="1466078400">- Add TARGET to install-bin for haproxy-systemd-wrapper</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-3" date="1466510400">- Fix TCP user timeout patch for 1.5.18 release</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-4" date="1479297600">- Return correct exit codes from systemd-wrapper (#1391990)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-5" date="1489665600">- Use soft-static allocation for haproxy UID/GID (#1386130)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-6" date="1493640000">- Use KillMode=mixed in systemd service file (#1444709)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-7" date="1512043200">- Rebuild with openssl-1.0.2k (#1509139)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-8" date="1532520000">- Build with USE_GETADDRINFO option (#1598491)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9" date="1551268800">- Detect down servers with mutliple tcp-check connect rules (#1677420)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9.1" date="1620820800">- Fix health checks for flapping servers (#1947750)</changelog>
</package>
<package pkgid="aec3a89729b93929c8b475e53acb5f8bf0f89f611fbc2ac0635a2abcefcf6935" name="haproxy" arch="src">
  <version epoch="0" ver="1.5.18" rel="9.el7_9.1"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-1" date="1465992000">- Update to stable release 1.5.18 (#1344012)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-2" date="1466078400">- Add TARGET to install-bin for haproxy-systemd-wrapper</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-3" date="1466510400">- Fix TCP user timeout patch for 1.5.18 release</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-4" date="1479297600">- Return correct exit codes from systemd-wrapper (#1391990)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-5" date="1489665600">- Use soft-static allocation for haproxy UID/GID (#1386130)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-6" date="1493640000">- Use KillMode=mixed in systemd service file (#1444709)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-7" date="1512043200">- Rebuild with openssl-1.0.2k (#1509139)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-8" date="1532520000">- Build with USE_GETADDRINFO option (#1598491)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9" date="1551268800">- Detect down servers with mutliple tcp-check connect rules (#1677420)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9.1" date="1620820800">- Fix health checks for flapping servers (#1947750)</changelog>
</package>
<package pkgid="e422df1fcba19462f1c25dc6fc5a232ae3dbbc833dc6c7c5492aa0beb8325b8d" name="haproxy" arch="src">
  <version epoch="0" ver="1.5.18" rel="9.el7_9.1"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-1" date="1465992000">- Update to stable release 1.5.18 (#1344012)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-2" date="1466078400">- Add TARGET to install-bin for haproxy-systemd-wrapper</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-3" date="1466510400">- Fix TCP user timeout patch for 1.5.18 release</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-4" date="1479297600">- Return correct exit codes from systemd-wrapper (#1391990)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-5" date="1489665600">- Use soft-static allocation for haproxy UID/GID (#1386130)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-6" date="1493640000">- Use KillMode=mixed in systemd service file (#1444709)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-7" date="1512043200">- Rebuild with openssl-1.0.2k (#1509139)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-8" date="1532520000">- Build with USE_GETADDRINFO option (#1598491)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9" date="1551268800">- Detect down servers with mutliple tcp-check connect rules (#1677420)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9.1" date="1620820800">- Fix health checks for flapping servers (#1947750)</changelog>
</package>
<package pkgid="dc685cd6ba40f16b061f965204ba3644f34e6085667d5b448b5e0df909dac905" name="haproxy" arch="x86_64">
  <version epoch="0" ver="1.5.18" rel="9.el7_9.1"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-1" date="1465992000">- Update to stable release 1.5.18 (#1344012)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-2" date="1466078400">- Add TARGET to install-bin for haproxy-systemd-wrapper</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-3" date="1466510400">- Fix TCP user timeout patch for 1.5.18 release</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-4" date="1479297600">- Return correct exit codes from systemd-wrapper (#1391990)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-5" date="1489665600">- Use soft-static allocation for haproxy UID/GID (#1386130)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-6" date="1493640000">- Use KillMode=mixed in systemd service file (#1444709)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-7" date="1512043200">- Rebuild with openssl-1.0.2k (#1509139)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-8" date="1532520000">- Build with USE_GETADDRINFO option (#1598491)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9" date="1551268800">- Detect down servers with mutliple tcp-check connect rules (#1677420)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9.1" date="1620820800">- Fix health checks for flapping servers (#1947750)</changelog>
</package>
<package pkgid="adaa4acd68b53da121e3987d9e60773998ced04653cdc6e8e09b8099b3b6a277" name="haproxy-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.18" rel="9.el7_9.1"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-1" date="1465992000">- Update to stable release 1.5.18 (#1344012)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-2" date="1466078400">- Add TARGET to install-bin for haproxy-systemd-wrapper</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-3" date="1466510400">- Fix TCP user timeout patch for 1.5.18 release</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-4" date="1479297600">- Return correct exit codes from systemd-wrapper (#1391990)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-5" date="1489665600">- Use soft-static allocation for haproxy UID/GID (#1386130)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-6" date="1493640000">- Use KillMode=mixed in systemd service file (#1444709)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-7" date="1512043200">- Rebuild with openssl-1.0.2k (#1509139)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-8" date="1532520000">- Build with USE_GETADDRINFO option (#1598491)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9" date="1551268800">- Detect down servers with mutliple tcp-check connect rules (#1677420)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9.1" date="1620820800">- Fix health checks for flapping servers (#1947750)</changelog>
</package>
<package pkgid="0b8fcfc96678079ea6ae28b0efa10b7c11233c368324a2f5267ec1e9a7e4fee0" name="haproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.18" rel="9.el7_9.1"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-1" date="1465992000">- Update to stable release 1.5.18 (#1344012)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-2" date="1466078400">- Add TARGET to install-bin for haproxy-systemd-wrapper</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-3" date="1466510400">- Fix TCP user timeout patch for 1.5.18 release</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-4" date="1479297600">- Return correct exit codes from systemd-wrapper (#1391990)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-5" date="1489665600">- Use soft-static allocation for haproxy UID/GID (#1386130)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-6" date="1493640000">- Use KillMode=mixed in systemd service file (#1444709)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-7" date="1512043200">- Rebuild with openssl-1.0.2k (#1509139)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-8" date="1532520000">- Build with USE_GETADDRINFO option (#1598491)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9" date="1551268800">- Detect down servers with mutliple tcp-check connect rules (#1677420)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9.1" date="1620820800">- Fix health checks for flapping servers (#1947750)</changelog>
</package>
<package pkgid="d9d1985adbef8eaf949b36a3f72f2fbcf34129589631eca3d9ee2b4fb1a111d3" name="hivex" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="760524a96bedff30e979119d82ec66ef80522c002207d347d81badc04a14c360" name="hivex" arch="src">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="7fa599438e5dc19d4338dfd23efcf129a9ff742f856084436c356f23197d5dad" name="hivex" arch="src">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="df32436ca2d625624fcc4e77c7e9cb9435d5065fbd8b5dd574520508bd6496ac" name="hivex" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="e60058a120bfd6fe3429c9cc67b6e36d39a858543cdee0b0977d0f8a3e5d182f" name="hivex" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="621509e788ba12b103a71f218fe3d0782a48bd887a85e8a9104fb937e789f43b" name="hivex" arch="src">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="f61a1ffc6941ad0d420cb3f331c9b7aff0e238f2849f27df99b1d6d2d0bf8bb2" name="hivex" arch="src">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="4ca51a162990ca363b2a74d49f06f6536a470d68f49e108a59b3424bdf4361dd" name="hivex" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="9150813686774da45af7c16ac3f415d0d2195ce69f8a89318b8ad8bff2109e65" name="hivex-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="54f122d71be74fa85f800ff9a1309cacc841b0e434be6ec5daebc2354f768825" name="hivex-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="0369c7184802ff6f5b8cba9eb126c5f86665040eb184b638b13b5614ca7fe48e" name="hivex-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="ddc26865d355120333de789d115acbf33ae71ad75578bf46e2b06d3a582da075" name="hivex-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="6a5ae1e0750c58e239349de2c7962eeb82b1ae3a79f962b387da36ebfc5c84a5" name="hivex-devel" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="8d16d210616849710566ba852805720f94912fe48fbc52db5705278fe69801df" name="hivex-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="05fc3e1384394c2048a78981b69636bb2365caf19f1235acd7a80399961c0f50" name="hivex-devel" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="d64e08fc2d91ef1559589f2fdf67d127d63aba24f09deb97a1c72511fb5cdc27" name="hivex-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="17f5683248867fe19bb0bede6d3c0b1c1ea4560c621639c4697d1cc2e7d0cdab" name="hsqldb" arch="noarch">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="7baad8bc7be496e4a8b28a8fb79bf722941a3b5f48cd3a5434e2fbfeb75207be" name="hsqldb" arch="noarch">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="9fde8de621123fdc296e08759da65972dc06dd6c00df261d15ffe2b900263194" name="hsqldb" arch="src">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="e28def6cf33ce13d2f46eda663bebe46b70cff11ec3151cd14da40db5214db3d" name="hsqldb" arch="src">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="f3fadd81b0d27db1249fe43324a4dc0f7347d4ca3b70b79060bf6522185e641e" name="hsqldb-demo" arch="noarch">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="1ce35e0b8a9ff938c20f670277eff0f0d4073ba7083a3a9ea388eea755a2561b" name="hsqldb-demo" arch="noarch">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="80aadfb7eef6aeb0eb343a30fdbade8cc9c6f03af8757c6624b30f07d4dd5de9" name="hsqldb-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="2c85f920c64aa65b770887f21496af5cdf3d39f9d70824ba54fd86a9808e6fd1" name="hsqldb-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="24c8d4e170b89aa9e604b236e4af6a6d4088f022d926df0de24eb365d63e23b9" name="hsqldb-manual" arch="noarch">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="89ccf8fc18e8c53d837b03c8d7f0a799815fab492b01d37d95db46b803badc77" name="hsqldb-manual" arch="noarch">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="c8f27c2ebaac3ec08c1bfd1881bf39d64228c91a34f1449b4a2044bf69753177" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="d98c4986c79f68430a7054a3833ae6033c077ad4654c9a46c1aa9f57f5327867" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="5ef455cc20d53ae313b519c30c910bf4f27597f60a30b4b469f6666b3b2cbf73" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ca315759a4b43dcbdaa86b4c02bd671276c4dd54c737e4a9d8608c93c6f9f1a7" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="5acb12407e2ba5aad23d3a4352e975de2d9fa410c4df0bfc259ab100cd586271" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="6b720d3e7d47b40d1feb8a7fe5d6c6acf80f95c0aa0c4fe382448a24b51b1e4c" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ff3ae852f5b25a02552e956191446fda59bd745236cfa2f314f87ee7dcb037f2" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="1964fb1714dee400e81120f4d323add28977532bace4ed6cfe8f073a578f588e" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4447174392226847435263ef49deb7ff3bb99c5e0e8eff2644d1f994d4de339d" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c73677c39e0bc99b60d3fe3d67912d03514b2c952cda63ee4c3703605a5d0924" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="19a116dcc840054db7973e1f504d332c880c453a06b5024200537bf582879993" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="6cb6590a89bc4995d2e5dd672db0690d194e93d644cd01a28331441680e965ba" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="db51f4014d9bc66b5288dd2a767885af5d599261aabbdae870fef659d88e358e" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="7a351c054adf75883060ebdf146fd292404fec7492720d26ddd436ce08f83792" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ce6ea14165c483a2e2e176063dfdd8a50fb39a2f72278f2e6436b0d057f17113" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="da49ed0a9f35ccef62a0f05a3357d8fa6164ea28a8600469bbb773fbe8856f19" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="86949ee0bd0b48fedafd05a2c52dbf528e00d66e325c816197115e4cfc5d0e64" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="76d68407c7e186faeff0c175128d33a22938960331bbace00c7208d1b4adb545" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="28703821c3ac73d00ddefdf57cc1470cf34ccd69e470c87fcededfd3d3cc0e52" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="032bc6498eafdba22ba7b6bfc2dec0a715bd3c1e650eb5f3f4c1895363a5aea1" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="0c2e405a7b692c1dc3e7c9ad0a67b3d970b76987e9860a833ffc09e6123599ee" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="0f008568377efb1132cd9e1eba25fd1849bf946291b4f915f4b7bce008f78550" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="7d7a1b4e71d53f4233879410e9ba237b753afe11033c99cac9d6121b93c76e32" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="2e9b482d8853ceb87fe875b16ed95a4b13083e341c9a3ac21453fc461b1bf772" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="98d4e497fdb4f563f891fc3c3a96edf5a15c61c3b9996848cc062cebd52bba11" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f538ee0fe7ba5450a877720ffa6b5b14aafca079da9eeac39f2805d6da7d3274" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="03be4573d207604c96ec0a4d3c802458639d4e967d33306617a0df68c7e442b2" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="60d30b39c32b7c5549d021b5caf10f29a50fb358566374600a7e6053e20416f9" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a2a834bc5c4c1d8333b55a032fc714e6aa497169fa0a3726d922cb1bb47e7f6a" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="74e5778010004e7adf53469c7d2229eb52d5798fc32c07709f15058f1ceaede2" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="fb77092f9a24c7d02e54b2b6a466fe7c6efec2b79840883374acdd087f164bcd" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="bad183c3ccd5158e9d74763e9af583d4faa799b0c4cd2bb648dfab7e0f5a5882" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="9cc910e955eec205e02a6d7b190782157528a14eebab880e375a105efbc8fbef" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="6f6204ee30c10cfe15e8179707587fa7210826993e7faaa0f54f97180d855b8b" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="2a8c318a542ed87d7fae0df4dcb55eea6db813bad0fd1248208425e26ead9729" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ed9cec4286e0e22040eef09bec4718d79b0bb00811ff092a49e64eb2ff0e5443" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="da8bf5b3dee52b59af47f38b6009e99f86749fc4cc437fae484f2d1ed1b4ea3c" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="b0bc25c16093ea3c20a108049e095ca8ccf06332d60a4939df8a17ce6b5e0cfb" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="9d661925e5200b25afd4992b10141bcedddb1b97cbc65297f4a0cf66f7379c21" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a1a374885a10605a7ea42f23be58bf7af0f99cd5e96aba1349cacc11ce1a3650" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="24000402e0052d8afa517c11e6b10be42458ee52478c7863495472d3dfa4b093" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="dbf5460c12ee79b0d8e4820bdeb3cd537af6530465143e7c8da3278c689553e0" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="23d93f82d522e4b05f9a72904822da837534c864463dfbbefb4b3d7130508d3c" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="06ecc7646887c6d038187cd6a1c03ebbfbaffe1cca81e2d9f82ae8a629bcb379" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="9e99c853467c6a6d1281ffdcdf1090a755d083ffc0e01fd0a4b137644d868725" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="1eae89cb8bcd9b2e759d0c146b65e2e96693a62291518f9d3dc431b940ab56a2" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="940e8bc766ac3b8ccc2fb1960e75e7e8f3badfae00c763c33e712691e4f04c79" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f5cd62f3e3eb6c6c55f3778e838c72b4cbd3c58ecd0aef03c39d1084af831cde" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="748fd6f3356faa8dd06f979c279e1a2496c0a6352bf248e037591d6cf8f9c428" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ad6d23720839ddb7e7a7504bc3098cf0448d4eec8d7bff8179b419370b27b9bf" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f31ce8393fe46a4df9e7ba469135b3f26e9216e2cdfefd80de6a5f505fbca113" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="87b65161a87b62b4efdd26de9fb1605b942542dd59ed037b03a3872cb501e4be" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f4914d382f5eba68504bd3e81f6c857c69361c61ff66de84db2775d96d038eb8" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="d30c39a7c4539b85b3727cf2594445a5d596c2eada68e49fe228231176835244" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="429d710dd54dfa40605457c1fa6e6ed89db8b7f0d41f2a26beb2c2d5e42322ac" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f4ba456970a7f102e5342ac3f01eb3d259ced3d36131061a5c41077bc9d92a91" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f4fd91bf8c1413162c15b5c01ef8c5193e151d8a167d84f0f1ae8eb182b29b31" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ba99fefbfc2b119c89753677b7439ba511a22fbafbf5d03546cac19ec77a8032" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="541214aa8b5644cad8a11c3555e9d9d20834df0ec96cd8d4bb2ea15b11a003ba" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f121d58d527e2793d4205b476d1fdf44afbbb2df4abc5d671b79ff2df42564f8" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="9d02aa477202230f8b251b5f719bb8ae35f280c3c430d718473895291dac9e59" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="92fa1335db7220298a135246f9333390d1a1010bd1f97ac638d83ccdc60152f7" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="aaf4b3f4cf0457c66412c95a021dd323f5c7c48184ed327d35a5a49d9138e281" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="43097a46937127905696580939e8b509d9bfd5787bcfc18a87f5db1891fdfdd7" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="ccff281bfe5e78b6b5a70137680d807357b547458b4e694db2994d32b45d662b" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c2e7309d4ce98c7b2106035d907ac16183d3b918e66da5ee8a8555c8cecd6872" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="7489bcdd10cb90589e0738fb3e44265f0cb85acab223e41d9d75009b52577552" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="9691294eaad9ae89dd079aac95521ca722ca54d88be218df8e7061be0ab5120e" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="47c14e4c447ecf0592ac4c2a328eacc0f28ae4eac22b34b466f7042377f44cae" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="42b4f3a88ba88d9fb5999225747e5ac032ae1c4726df02427fb2e4d969dbc38f" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="0fd81e1e927c5194e54c86028b38b7a309c312360ebeb2355f2a94af4824aeaf" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="2e63affb225886b19a5e9614cc7fb06be76d7f3e15ed06ed0d5aa82edbe1bab9" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="1f2cbc9b9739f277cb02703d99916b47594e85c52def37faba187ce36b2213b7" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="b6605d3bb12b46ffdbf8f40aa79e15fefc8edaa16c70778ba6aee04b5e9bb364" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="b3dec3386614e1db8efc0fdc06e953c44aa0d7feeaae0709bb66fbaccbb0098a" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="febdeb2f26b5c2fb4be439c3f72a73ea2f8598578b12b4afc43cad11aac5e37e" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="2f0174fe58295cabbbd587131b919fed09bda357d59c36da064ad31866b398ff" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="8c5231b05a254040f36b13603c24769d62f930b99bd630b25cbe4cb5a1375ccd" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="37d356f222911a39ee3ae53f1d752dec35f58b3087489bd0c1553646b8fffb4a" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="2e9069d801825ba4e63373bfc5cd3c49a3c7550bde37a5bb4aced7396ecaf870" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="0075709e709ae71bd83102b9a5c5751cb1c3e61f3f170312bfbd79494c17fd15" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="77cc78216418e4d2af45ea8b4fd43084afc2f19b23bfa6d77be3830a8ee9e225" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="640f18a972c22b5055a7781b4ac320ef2d48720c4edb7f3dc766e3f9b0c98359" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="62b6d37b8f81f9e5df19871dfa2c63fff314e725f4b315627ca14e20b52cc694" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="58e0ce357328ded04df7b4f29d6c6cf9ae9752a25aacd10cb7244aaeaa0ab354" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="e5f7855f55a5c6fd09fb7a617a0991549020b3c9002e8f9e4563a1c733ffef63" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="a26b69c0759831bd6c0bb512bc1d3dff3dc1cefbbbc48f421a32f3fd3d1ad81f" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="4fbe9fb83b53a5234bd4ac553bbe449abb9646307f630960566e34a602b05ea2" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="89d1ebfd31b07f15ba9564ee00cf2791e20930f6b8fd5e69c8042ac2bd859548" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4e6c28e80af3aede276171dbbc2a53111853dc5d617e7cc648d1999052a3ee57" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="33fa093d612879fde966b632eb0a57540b807b09f2cea24e8fe8b286ce6ff649" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="5732954247a6858951e1ca7c5e8f652f65f5e5355e3abd8ada1b1ae2c442ca3f" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="8dc5392332ce741e02188d68bef397c5c60ba35f4dd8fcb672a2f9c21f33fe53" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="adccbe26d4ed2bbd08daa73483f9f112a425cc6c16bb9072a3635ccb15fba9bf" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="bc93d592e58961c1d4f93824b0308744d086377e7d89077cafb2558d4bc1d250" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="044886f08b7ad1417b3d7ffbb521f6de02979a06a7623e6ec5913b4e76ab6bde" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4dd1762503051201fbaae84a68005583cae6957e4f27458cef3fd870982a56bd" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f42cd946e3ab47109652f1b8c56d71ad3e52e3061da379685af9dab3109e9809" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4cb51c520e05486cf421128e8ea45ec04a7467d7e8df1763abea4a172aa3bbae" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="93f6e33f12d867072c3f52efe71557bd472622b810ec7650db86107a297bbf33" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c82d80ceba882ee1ff3b79d33aa2aaec82b68866e0619486861515b1c773bef3" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="eea73f2b93bf29383552d9051c7da2e45130c8710449e26b897d4452b13ff213" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="df8b887e1ef972d58d3d7e57058979bb8f99529444d74c56d918b0095d8df3da" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="353e860253d030c017c4f14ae35c4b6f6b7132f0fc98e1a2d914ee974ed12155" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e70b5aa5132e6ec59d3aacd74666da61a60c4bf9beb9d02b0d7ecb4c0bb59865" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="758deb16f75b01b885987ab5f1b5c28f3b4df539b26b8fdc4fed0c17bc0b9ae4" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="efbf56cde985aa1b3ae18fc29c22d52dac284d650b1daf6d95dff9fc2cfe50d3" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="b0e49ff23b59461599fcef2f264cbd03114e4d42a890af50d1946319b6be29c0" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="cea14fddb05d4ea0bb79193ca444691db16b0568c3bf89acd031bd10e55fc77d" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="00311f19553fd145ae47acb2614fb66867f6f9a5b5088ea308a046bb785cbb3d" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ca13b7eb0a88f0a05e240673347c14a2ed9c104d7c1a9f7cd2b6a4a09e06a19e" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="72dce7b212a0d0734ae4db75c29700823772e36b8b397353c6bda52a5fc3f23a" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="b945e4d31b71d4ebf5b242c4a70585ffd8dd44be7c10ec7e3bd9184dc8d3bd21" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3913a70689cf8d2bdaff2c6a7b1014b75de9c6c09d6a816a90abb2d925c20fe2" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="f573013bcb8f50393c4387d9edfc8c1e6adec30abcf4b03d63179c406a113ec6" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="09f3db6201294d20222cfce1a32c9f4b815518210d1ca74514c9b80c585be7bf" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="52cbb7691fdc0b87c5dd608bf64adba77c0cdbf1f18087985ba364d98bbf7dad" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="000f1fb5d41be3823b843803a0025bed0f02ff77bb41dbcff0b9962cf060b538" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="9532b063b06a455d58a633cc4b089cadf8c42d355d32d548a498967056c39402" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="6e7875351827a24921eb4f50e69346fba144a3b03b1b01f2370d79a8d2fcc84a" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="7b10d307c5b175533738993e975696a35c389afcc0f2f34fb51a2b93e2780e2d" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="30a8f0b54a7262fe119934e8d8ab13992b21852240bc785231d9eb87275ccade" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f6a9a628ff98a035086fbaecfe1a8077982ffd46fb5a4539466fa597c617d887" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="77bbe9b737a50c736fb6864e55704084d3aa13ac1c1c1efc1525bacb8b1e3e1e" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="933968551ab2f5b82c42e7ad3a9a798bbf831be7df16672c77b8c262a2e9a1db" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="d62b4ea3b30193836a1f65aa71ab4938e4bb5cd8b9ec02b4178871893700edcd" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="984730756915dc10dbfdf463a76ba591d662015ed66e054a57134e8a9bb3db0d" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="840c151858c7499cf0c9ea2fc40e1a91faaa6e82bb783829262600bda2f348a2" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ce29a3c2ded624c8eca291433002c8bc3031d6f8a1cc89ca9b8466581b38743a" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="54cc59eb6e86f0ec1ed865d84623938bfd16f24766bb1ce6c56b6f2c1a4c468d" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="908d2aa0562ac80ffde6da274d6f8299cd81c815f478908986798998bad43215" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="f8b86f9541de8e2f550f38b258741c0e68f2ed07e9de67ed51b3442cc1f8cd7c" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="085ac2ec0ce046156073e08fe8fc1d4a4d968b2a3b68c09a39249259575a9f86" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="e67b6f874d31ed4d318f4cd1bef91d1ab27b23a85f650b3d3ca02f66c60dd3c0" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="27b50b21a72330c577689bc5e096e7ee59050eb699a18832ae92871f66a7f5a3" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a13fc6ae8e2d34e95faf83b6a87b9c8ce6b1373dd14432cfd9e859225f7cd44c" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="8594efce9c7d0556a31afc6a3bf02896bc5b0c0e4b840f1ae409253ee3cca432" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="00466668269e5692c4ec4b8e1e19997cd4b0999cfeb2b8c18fd151062fb5aa66" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="56fd01e24ea700c2d553e61abc38d535e3786876b17720a64350a1f3bb7432c7" name="ibacm" arch="i686">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="15d99c2f2a7b20d3eef6aa9eac404eae0091f5f89785d3c258de4e17e68293b2" name="ibacm" arch="x86_64">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="baaaabf10755a30860e511d65ab1e132064ab433824c62a468a13047aa1fa6b0" name="ibus" arch="i686">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="c4f634105cd771598042f2a7e3d5810208ef8ce4de1d7e56710f1f161b8a3f0d" name="ibus" arch="src">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="2c779eabd20046a595d94754914865daebcca453a7cb7ab551ae935584314969" name="ibus" arch="src">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="7ace8c2cae72a0cc48fb79ddb07a2576adb5e88549758e31621c8268e2a0a69e" name="ibus" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="d6bbe8e2ce7eb25c2892e18733811cc65a26500329515a41f104a7df7c6779e9" name="ibus" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="df5f1312c9b5fdb055b82dc0cd9040d7bb6b5d5a635dd1dd6a592f63e852b336" name="ibus" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="abf9ce8f4595e951fac6319104bdf509c9098d69b3534bcaf86c6a0a237af51a" name="ibus" arch="src">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="4b7c6a6211147eb1ae9b1478e6143b4df4b6c92981b4ff69eabcea9a27c17278" name="ibus" arch="src">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="b0c00b540233dc028f5136a25f862ff74059c34cbf30596fe1d14ca304004e53" name="ibus" arch="src">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="e0dff563f7bcd2a119fcdc48aef6583d0fffe13c3c8d40345fc72fb0140e7a1f" name="ibus" arch="src">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="b8017662202eb57d031a7e7e5f539e9db72b0c04b36af6f5824c9820a549eb06" name="ibus" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="a4207a00bccb944a35af6cc222424500393fdc73906664a1900edfba9e86ed02" name="ibus" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="ce9bf6c6e5639f7bdd1e7f37df637d05a18b4033d694607ca1c90610fd2ad0c3" name="ibus-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="f8b8d0c4347f4169e9701513f67485e62d6739547869dafe613ba39b4ac016d2" name="ibus-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="10a2f0dd6a7e1e50f65f8f9f9931b5428b50bb76e960a96a129b5258fc5b776d" name="ibus-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="70efaa18137f54680ce353bac2bc1dabeb7cc1f340fd3cb5243835cdd0497f27" name="ibus-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="6d22976cef0ece05f99b65a2516da086bccf6130f999079be3529ce3ab6fb5cc" name="ibus-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="6ff0059d98839ce49433a1c005f011dd6a68e56510d67e7df6d2ed4d0f7200f2" name="ibus-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="384fe730abb70ee39985a8ffe6676ff0462fbedb0b29a60759c12ce2f8a3bb4b" name="ibus-devel" arch="i686">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="837c0ebf1afe145180f6511babadd27bc6a19450799bb24e4d252aed9fa7ab64" name="ibus-devel" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="3b42d76a32488f1900221a4770984ddc3e93ec9a5b58cffcfa0ee1f679e68939" name="ibus-devel" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="82969377cc8239cc949475ae1f2e81befb3124d86171844b1efabf321378227c" name="ibus-devel" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="30f11c121476eb3c8e46a9edf96d795eafe38aadd228e808ab995b786a1e337f" name="ibus-devel" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="521bb39f69c6f5395d07f71ae0c7ea883c218ad8e416ccc40954909af922c888" name="ibus-devel" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="29cbcacf688f7cde1f023c74abb0984722dd02f17eaa4cec2db61a16a23a14d0" name="ibus-devel-docs" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="8d7931804178bbf33423102f5f44ccb420990ba7451510924e5faca180c73b90" name="ibus-devel-docs" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="8fada391312fade9f1313859fecf33d283b48e7822a99e104d685ae39e0af916" name="ibus-devel-docs" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="a273e960777e0aac255b4e3ff50705e5eb75a40f0b0bb664cdb54beb16ba7cb9" name="ibus-devel-docs" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="5887da82717d293a7d637d09bc6ad2e59ae46e9faa69cc98a39edaa263bfdabc" name="ibus-devel-docs" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="72037cc91de515657e40fe7f80e4fc01221ae1f9ad83729ac7126ba6f91814a7" name="ibus-devel-docs" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="2f711388ddb2137b8291a6e0686a09981a66c48ebaee2003850354773b0668e8" name="ibus-gtk2" arch="i686">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="201c467c327da5c65e8919649d4fb8e05e0ba47658cd687525dd7b6ef7637495" name="ibus-gtk2" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="f24748909da2b18ee78cb76db0fd28c734d1c24f39734e8eb3078e184882440f" name="ibus-gtk2" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="e009a9f43bfb017ea82a2f06806c78859e99e1f0bdf6933aafab8b868e825e3b" name="ibus-gtk2" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="08d1877d68520cbbb61bde91d170fcf5a1b66dff646bf929dea168703a5ae721" name="ibus-gtk2" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="00050579ea043c849df16dc43d1906599177d69c3f3c62f052cd0dcf6011437a" name="ibus-gtk2" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="18c362627618ce9b53a1343498ae5e1f8c52dbdeb472991415c2886c4c45a290" name="ibus-gtk3" arch="i686">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="d43b439273ea1c5a6fba41948a693e10afac9953ac624a60774bd93e3a182e1f" name="ibus-gtk3" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="d4a6787fc46dfd68856f4bf2f5368187500966eb1c32d322dc66254aff29d7a6" name="ibus-gtk3" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="2b9f62031585157392fd92e99223f8ad06fdc1e6e9f159eef72001bb722b6c6a" name="ibus-gtk3" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="09031a770a9c77df296a12e571743a5197f1973905917d8d3b276c1ae3af8274" name="ibus-gtk3" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="ba2a77b5bfc87850c02f6d5a227876fd05a176f5dd84ab63aab9a7656ee236e8" name="ibus-gtk3" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="c6fc913cb1e19fdbbc6a7bac94930a35f6a777fcccb8372fdbb01c73bb2afb18" name="ibus-libs" arch="i686">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="7698ecb016be1d6b6ff8f3b7828bc7ff67d05d9d5bf492553fa40c5c0261b2cf" name="ibus-libs" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="0ccc342f63fde0dba68d218eb7c0aca5f63cfa993dcdcfe8a8ba93dc03e33487" name="ibus-libs" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="6499c7a3c4900aac8952888d4990e32c3bcc839d00bf7a08a851e406a3e7fcee" name="ibus-libs" arch="i686">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="16e6106d0753148fcc967425e54a865f93e8498418baa87914afe9348b95cd71" name="ibus-libs" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="5b6693d0c71a7441c90670c1ab734125a7c50dad46c173b8865c0181484e8dfc" name="ibus-libs" arch="x86_64">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="a37108e8589d49c3037a63d598e7b9c3133a016b8b99035f78c6ecd96f95222d" name="ibus-pygtk2" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="c40d2fd4c83df257302cbd54d178eaf1a7f75c9bbed64d26117227634665465a" name="ibus-pygtk2" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="b528a859b729df2c0f1c4d18db92743afc289e3936557e25fbde322b15867a04" name="ibus-pygtk2" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="b33f08e713b23d832b349336876ad520b608c2da9b3d736b78f9e88cba312c2e" name="ibus-pygtk2" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="daf0355506c3310387ffefe62a15bd19a3a63981b67abc98c169e3a6d59634f9" name="ibus-pygtk2" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="df87ff7975821c472d5ad467513f06202fda09952d95dc057a80cabbbec2d311" name="ibus-pygtk2" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="13888c5c84ca0b82f7c93484143939184b5beaf676e5a65f77e42e24b1b37d10" name="ibus-setup" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="0239777fa16f4c445ea01168721697a3c2f36f5d8d71e5e4320c1d92fad71488" name="ibus-setup" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="b6ac39f85beb3bba98eae1172cf406fa9d3969e9c3c12f7862f773bbd0f229c7" name="ibus-setup" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="598776d3d2c019830fb42b227b0f659643a25b932d825f8de3d06d4e3798d3c2" name="ibus-setup" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="e0a023774621b5c162ddfe9bc0af42dda031074703565335a84bf4c1bb57ec7b" name="ibus-setup" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="8e939afba1bfdbcbd7d4f60fd09c07067e8d58c3d84cfd0f0c0e769c1deee010" name="ibus-setup" arch="noarch">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="12619119fb5f0bb7e32472914e830232e460d86c885c89a9968ac2ab6a98fc11" name="icedtea-web" arch="i686">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. 
set -e 
   _pompart="need" 
   _jarpart="tobe" 
_filelist=".mfiles" 
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-fragments 
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
    if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386$_dir/$_jarpart ]; then 
	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386$_dir/$_jarpart" 
    fi 
done 
python -m /usr/share/java-utils/maven_depmap   \
          -p "/usr" -n "" \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-fragments/icedtea-web \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-poms/$_pompart \
        &gt;&gt; ${_filelist} 
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386::' ${_filelist} 
sort -u -o ${_filelist} ${_filelist} 


- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="bc743a542096189f33e07b5ce07e1a521c07e77d20a6bd377ce755ec0746af26" name="icedtea-web" arch="src">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. %add_maven_depmap need tobe fixed)
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="066bd1c548af9d59a50c78e69ea75acfb27f0556484aefb05a657dc4a3b57666" name="icedtea-web" arch="src">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. %add_maven_depmap need tobe fixed)
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="20607f2a20a65d719e24885b0ebc3d48780ca089fc25686178fa8b95e79d30ef" name="icedtea-web" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. 
set -e 
   _pompart="need" 
   _jarpart="tobe" 
_filelist=".mfiles" 
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments 
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
    if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then 
	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart" 
    fi 
done 
python -m /usr/share/java-utils/maven_depmap   \
          -p "/usr" -n "" \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \
        &gt;&gt; ${_filelist} 
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist} 
sort -u -o ${_filelist} ${_filelist} 


- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="f727b43d5a29f2489f80f61a13e3e50e336388900a1be372e4864ad8db7a5082" name="icedtea-web-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. 
set -e 
   _pompart="need" 
   _jarpart="tobe" 
_filelist=".mfiles" 
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-fragments 
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
    if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386$_dir/$_jarpart ]; then 
	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386$_dir/$_jarpart" 
    fi 
done 
python -m /usr/share/java-utils/maven_depmap   \
          -p "/usr" -n "" \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-fragments/icedtea-web \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-poms/$_pompart \
        &gt;&gt; ${_filelist} 
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386::' ${_filelist} 
sort -u -o ${_filelist} ${_filelist} 


- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="1e6780684068ecdfebba8486fe56843bf6289c34f4bcd0d5acc8a3b93c5da795" name="icedtea-web-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. 
set -e 
   _pompart="need" 
   _jarpart="tobe" 
_filelist=".mfiles" 
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments 
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
    if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then 
	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart" 
    fi 
done 
python -m /usr/share/java-utils/maven_depmap   \
          -p "/usr" -n "" \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \
        &gt;&gt; ${_filelist} 
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist} 
sort -u -o ${_filelist} ${_filelist} 


- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="e119ec9027245fda341fb5d7211a406797f249d5ab10ec82fec19ae762b87221" name="icedtea-web-devel" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. 
set -e 
   _pompart="need" 
   _jarpart="tobe" 
_filelist=".mfiles" 
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-fragments 
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
    if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386$_dir/$_jarpart ]; then 
	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386$_dir/$_jarpart" 
    fi 
done 
python -m /usr/share/java-utils/maven_depmap   \
          -p "/usr" -n "" \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-fragments/icedtea-web \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-poms/$_pompart \
        &gt;&gt; ${_filelist} 
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386::' ${_filelist} 
sort -u -o ${_filelist} ${_filelist} 


- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="d21289819a13819944453d0b310ffe38c5eb49255479c542f3b239895bc95057" name="icedtea-web-devel" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. 
set -e 
   _pompart="need" 
   _jarpart="tobe" 
_filelist=".mfiles" 
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments 
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
    if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then 
	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart" 
    fi 
done 
python -m /usr/share/java-utils/maven_depmap   \
          -p "/usr" -n "" \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \
        &gt;&gt; ${_filelist} 
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist} 
sort -u -o ${_filelist} ${_filelist} 


- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="176cbcf02de347f26fa59a71ed030a8a981c480fec33140e7a50e54349c22a9f" name="icedtea-web-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. 
set -e 
   _pompart="need" 
   _jarpart="tobe" 
_filelist=".mfiles" 
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-fragments 
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
    if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386$_dir/$_jarpart ]; then 
	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386$_dir/$_jarpart" 
    fi 
done 
python -m /usr/share/java-utils/maven_depmap   \
          -p "/usr" -n "" \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-fragments/icedtea-web \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386/usr/share/maven-poms/$_pompart \
        &gt;&gt; ${_filelist} 
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.i386::' ${_filelist} 
sort -u -o ${_filelist} ${_filelist} 


- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="9731aaf84d1e4a3efb53f11ea5dfaf6c20b41e4a0ba5dcb97ac9eb0b22b6c7ca" name="icedtea-web-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. 
set -e 
   _pompart="need" 
   _jarpart="tobe" 
_filelist=".mfiles" 
install -dm 755 /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments 
for _dir in /usr/lib/java %{_javajnidir} /usr/share/java; do 
    if [ -f /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart ]; then 
	_jpath="/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64$_dir/$_jarpart" 
    fi 
done 
python -m /usr/share/java-utils/maven_depmap   \
          -p "/usr" -n "" \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-fragments/icedtea-web \
          /builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64/usr/share/maven-poms/$_pompart \
        &gt;&gt; ${_filelist} 
sed -i 's:/builddir/build/BUILDROOT/icedtea-web-1.7.1-4.el7_9.x86_64::' ${_filelist} 
sort -u -o ${_filelist} ${_filelist} 


- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="ceb7e8bf973ae623cc05d77a47ddae740eb97d618b5eb7fe19e6c8aa049394e6" name="initscripts" arch="i686">
  <version epoch="0" ver="9.49.53" rel="1.el7_9.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.45-1" date="1532433600">- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.46-1" date="1535112000">- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.47-1" date="1553860800">- Fix file permissions for /var/log/dmesg</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.48-1" date="1565092800">- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.49-1" date="1566216000">- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.50-1" date="1583928000">- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.51-1" date="1584532800">- Fix inline comment - (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.con&gt; - 9.49.52-1" date="1589803200">- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1" date="1590148800">- rwtab: Add support for chrony (bug #1838260)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1.el7_9.1" date="1602590400">- rwtab: Allow updating mlocate.db (bug #1880095)</changelog>
</package>
<package pkgid="191b315f059c553b65d89b04aa5e59549491da70c32b330e472f6ac456fabf9e" name="initscripts" arch="src">
  <version epoch="0" ver="9.49.53" rel="1.el7_9.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.45-1" date="1532433600">- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.46-1" date="1535112000">- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.47-1" date="1553860800">- Fix file permissions for /var/log/dmesg</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.48-1" date="1565092800">- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.49-1" date="1566216000">- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.50-1" date="1583928000">- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.51-1" date="1584532800">- Fix inline comment - (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.con&gt; - 9.49.52-1" date="1589803200">- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1" date="1590148800">- rwtab: Add support for chrony (bug #1838260)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1.el7_9.1" date="1602590400">- rwtab: Allow updating mlocate.db (bug #1880095)</changelog>
</package>
<package pkgid="03af6aa5ca9514a0edc831be26ca46878873da28fa026af9478a36265746af00" name="initscripts" arch="src">
  <version epoch="0" ver="9.49.53" rel="1.el7_9.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.45-1" date="1532433600">- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.46-1" date="1535112000">- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.47-1" date="1553860800">- Fix file permissions for /var/log/dmesg</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.48-1" date="1565092800">- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.49-1" date="1566216000">- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.50-1" date="1583928000">- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.51-1" date="1584532800">- Fix inline comment - (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.con&gt; - 9.49.52-1" date="1589803200">- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1" date="1590148800">- rwtab: Add support for chrony (bug #1838260)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1.el7_9.1" date="1602590400">- rwtab: Allow updating mlocate.db (bug #1880095)</changelog>
</package>
<package pkgid="ab6fa8e090e98c4f82d3b48e6c611336147fc8083bcd5b4690c382db4113d6e4" name="initscripts" arch="x86_64">
  <version epoch="0" ver="9.49.53" rel="1.el7_9.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.45-1" date="1532433600">- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.46-1" date="1535112000">- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.47-1" date="1553860800">- Fix file permissions for /var/log/dmesg</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.48-1" date="1565092800">- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.49-1" date="1566216000">- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.50-1" date="1583928000">- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.51-1" date="1584532800">- Fix inline comment - (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.con&gt; - 9.49.52-1" date="1589803200">- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1" date="1590148800">- rwtab: Add support for chrony (bug #1838260)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1.el7_9.1" date="1602590400">- rwtab: Allow updating mlocate.db (bug #1880095)</changelog>
</package>
<package pkgid="2815735554bd67e6f131a9e94b15cecf2850cb752b01d600d866b94d2093c337" name="initscripts-debuginfo" arch="i686">
  <version epoch="0" ver="9.49.53" rel="1.el7_9.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.45-1" date="1532433600">- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.46-1" date="1535112000">- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.47-1" date="1553860800">- Fix file permissions for /var/log/dmesg</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.48-1" date="1565092800">- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.49-1" date="1566216000">- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.50-1" date="1583928000">- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.51-1" date="1584532800">- Fix inline comment - (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.con&gt; - 9.49.52-1" date="1589803200">- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1" date="1590148800">- rwtab: Add support for chrony (bug #1838260)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1.el7_9.1" date="1602590400">- rwtab: Allow updating mlocate.db (bug #1880095)</changelog>
</package>
<package pkgid="3cf827fc1cf5dbe908e2465f9e685c47fc170634de82780726fd8c6577ece8f1" name="initscripts-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.49.53" rel="1.el7_9.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.45-1" date="1532433600">- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.46-1" date="1535112000">- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.47-1" date="1553860800">- Fix file permissions for /var/log/dmesg</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.48-1" date="1565092800">- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.49-1" date="1566216000">- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.50-1" date="1583928000">- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.51-1" date="1584532800">- Fix inline comment - (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.con&gt; - 9.49.52-1" date="1589803200">- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1" date="1590148800">- rwtab: Add support for chrony (bug #1838260)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1.el7_9.1" date="1602590400">- rwtab: Allow updating mlocate.db (bug #1880095)</changelog>
</package>
<package pkgid="a434bb6c0570f068789e46b1a65edd7d1f8a269f116e255b04215a5ec19d3cc1" name="insights-client" arch="noarch">
  <version epoch="0" ver="3.0.14" rel="3.el7_9"/>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.0-4" date="1506513600">- Initial build</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.1-5" date="1507118400">- Resolves BZ1498581
- Fixes sys.path issues
- Includes Insights Core 3.0.2-6</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.2-2" date="1508328000">- Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
- Fixes version migration logic
- Fixes symlink issues to old binary
- Fixes short ID analysis for images and containers
- Fixes Docker library detection
- Fixes image and container detection
- Fixes registration execution flow
- Fixes --version flag to print to stdout and include additional versioning information
- Includes Insights Core 3.0.3-1</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-1" date="1516276800">- RHEL 7 RPM now uses systemd service and timer instead of cron
- Addition of IO and CPU cgroup constraints
- Fixed memory cgroup constraint</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-2" date="1518004800">- Correct the version strings in Obsoletes and Provides in RPM spec</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-6" date="1518782400">- Persist systemd timer config between reboots</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.3-8" date="1521028800">- Resolves: rhbz#1555041</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.13-1" date="1581422400">- New upstream version
- Resolves: RHBZ#1795256</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-1" date="1588161600">- Removed printing to stdout in cron script (RHBZ#1828778)
- Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
- Update systemd timer to use timers.target (RHBZ#1798373)
- Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
- Update shipped core to version 3.0.161 (RHCLOUD-4457)
- Enable automatic checking for advisor results (RHCLOUD-4558)
- Ensure dependency on coreutils for timeout (RHCLOUD-5131)
- Build system converted to autotools (RHCLOUD-4333)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-3" date="1597924800">- Backport patch to disable sleeping a systemd unit (RHBZ#1870658)</changelog>
</package>
<package pkgid="8e19699896a581fc18d3183a3627d1252d5d1adfcffefa2f2f88834394c3cf49" name="insights-client" arch="noarch">
  <version epoch="0" ver="3.0.14" rel="3.el7_9"/>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.0-4" date="1506513600">- Initial build</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.1-5" date="1507118400">- Resolves BZ1498581
- Fixes sys.path issues
- Includes Insights Core 3.0.2-6</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.2-2" date="1508328000">- Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
- Fixes version migration logic
- Fixes symlink issues to old binary
- Fixes short ID analysis for images and containers
- Fixes Docker library detection
- Fixes image and container detection
- Fixes registration execution flow
- Fixes --version flag to print to stdout and include additional versioning information
- Includes Insights Core 3.0.3-1</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-1" date="1516276800">- RHEL 7 RPM now uses systemd service and timer instead of cron
- Addition of IO and CPU cgroup constraints
- Fixed memory cgroup constraint</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-2" date="1518004800">- Correct the version strings in Obsoletes and Provides in RPM spec</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-6" date="1518782400">- Persist systemd timer config between reboots</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.3-8" date="1521028800">- Resolves: rhbz#1555041</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.13-1" date="1581422400">- New upstream version
- Resolves: RHBZ#1795256</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-1" date="1588161600">- Removed printing to stdout in cron script (RHBZ#1828778)
- Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
- Update systemd timer to use timers.target (RHBZ#1798373)
- Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
- Update shipped core to version 3.0.161 (RHCLOUD-4457)
- Enable automatic checking for advisor results (RHCLOUD-4558)
- Ensure dependency on coreutils for timeout (RHCLOUD-5131)
- Build system converted to autotools (RHCLOUD-4333)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-3" date="1597924800">- Backport patch to disable sleeping a systemd unit (RHBZ#1870658)</changelog>
</package>
<package pkgid="d4165e0c91a0ead224eff5b95eeb162fb235f9b21a72d777561b4a5371d858f2" name="insights-client" arch="src">
  <version epoch="0" ver="3.0.14" rel="3.el7_9"/>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.0-4" date="1506513600">- Initial build</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.1-5" date="1507118400">- Resolves BZ1498581
- Fixes sys.path issues
- Includes Insights Core 3.0.2-6</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.2-2" date="1508328000">- Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
- Fixes version migration logic
- Fixes symlink issues to old binary
- Fixes short ID analysis for images and containers
- Fixes Docker library detection
- Fixes image and container detection
- Fixes registration execution flow
- Fixes --version flag to print to stdout and include additional versioning information
- Includes Insights Core 3.0.3-1</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-1" date="1516276800">- RHEL 7 RPM now uses systemd service and timer instead of cron
- Addition of IO and CPU cgroup constraints
- Fixed memory cgroup constraint</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-2" date="1518004800">- Correct the version strings in Obsoletes and Provides in RPM spec</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-6" date="1518782400">- Persist systemd timer config between reboots</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.3-8" date="1521028800">- Resolves: rhbz#1555041</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.13-1" date="1581422400">- New upstream version
- Resolves: RHBZ#1795256</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-1" date="1588161600">- Removed printing to stdout in cron script (RHBZ#1828778)
- Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
- Update systemd timer to use timers.target (RHBZ#1798373)
- Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
- Update shipped core to version 3.0.161 (RHCLOUD-4457)
- Enable automatic checking for advisor results (RHCLOUD-4558)
- Ensure dependency on coreutils for timeout (RHCLOUD-5131)
- Build system converted to autotools (RHCLOUD-4333)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-3" date="1597924800">- Backport patch to disable sleeping a systemd unit (RHBZ#1870658)</changelog>
</package>
<package pkgid="181dfab514bf3af38229461ab963e45122e4fab13ea6d1ead1b1e33ba481ab6b" name="insights-client" arch="src">
  <version epoch="0" ver="3.0.14" rel="3.el7_9"/>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.0-4" date="1506513600">- Initial build</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.1-5" date="1507118400">- Resolves BZ1498581
- Fixes sys.path issues
- Includes Insights Core 3.0.2-6</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.2-2" date="1508328000">- Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
- Fixes version migration logic
- Fixes symlink issues to old binary
- Fixes short ID analysis for images and containers
- Fixes Docker library detection
- Fixes image and container detection
- Fixes registration execution flow
- Fixes --version flag to print to stdout and include additional versioning information
- Includes Insights Core 3.0.3-1</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-1" date="1516276800">- RHEL 7 RPM now uses systemd service and timer instead of cron
- Addition of IO and CPU cgroup constraints
- Fixed memory cgroup constraint</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-2" date="1518004800">- Correct the version strings in Obsoletes and Provides in RPM spec</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-6" date="1518782400">- Persist systemd timer config between reboots</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.3-8" date="1521028800">- Resolves: rhbz#1555041</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.13-1" date="1581422400">- New upstream version
- Resolves: RHBZ#1795256</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-1" date="1588161600">- Removed printing to stdout in cron script (RHBZ#1828778)
- Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
- Update systemd timer to use timers.target (RHBZ#1798373)
- Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
- Update shipped core to version 3.0.161 (RHCLOUD-4457)
- Enable automatic checking for advisor results (RHCLOUD-4558)
- Ensure dependency on coreutils for timeout (RHCLOUD-5131)
- Build system converted to autotools (RHCLOUD-4333)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-3" date="1597924800">- Backport patch to disable sleeping a systemd unit (RHBZ#1870658)</changelog>
</package>
<package pkgid="2a0d61708e3e654ab67bcd8f25e3923398f697049caa945512324cf19c016be8" name="insights-client" arch="noarch">
  <version epoch="0" ver="3.1.1" rel="1.el7_9"/>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.1-5" date="1507118400">- Resolves BZ1498581
- Fixes sys.path issues
- Includes Insights Core 3.0.2-6</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.2-2" date="1508328000">- Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
- Fixes version migration logic
- Fixes symlink issues to old binary
- Fixes short ID analysis for images and containers
- Fixes Docker library detection
- Fixes image and container detection
- Fixes registration execution flow
- Fixes --version flag to print to stdout and include additional versioning information
- Includes Insights Core 3.0.3-1</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-1" date="1516276800">- RHEL 7 RPM now uses systemd service and timer instead of cron
- Addition of IO and CPU cgroup constraints
- Fixed memory cgroup constraint</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-2" date="1518004800">- Correct the version strings in Obsoletes and Provides in RPM spec</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-6" date="1518782400">- Persist systemd timer config between reboots</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.3-8" date="1521028800">- Resolves: rhbz#1555041</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.13-1" date="1581422400">- New upstream version
- Resolves: RHBZ#1795256</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-1" date="1588161600">- Removed printing to stdout in cron script (RHBZ#1828778)
- Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
- Update systemd timer to use timers.target (RHBZ#1798373)
- Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
- Update shipped core to version 3.0.161 (RHCLOUD-4457)
- Enable automatic checking for advisor results (RHCLOUD-4558)
- Ensure dependency on coreutils for timeout (RHCLOUD-5131)
- Build system converted to autotools (RHCLOUD-4333)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-3" date="1597924800">- Backport patch to disable sleeping a systemd unit (RHBZ#1870658)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.1.1-1" date="1606737600">- New upstream release (RHBZ#1899592)</changelog>
</package>
<package pkgid="962e8a1b411a64e334dcf2f3dba7684177e3893f64dc3e449451dca466e9fbbc" name="insights-client" arch="noarch">
  <version epoch="0" ver="3.1.1" rel="1.el7_9"/>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.1-5" date="1507118400">- Resolves BZ1498581
- Fixes sys.path issues
- Includes Insights Core 3.0.2-6</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.2-2" date="1508328000">- Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
- Fixes version migration logic
- Fixes symlink issues to old binary
- Fixes short ID analysis for images and containers
- Fixes Docker library detection
- Fixes image and container detection
- Fixes registration execution flow
- Fixes --version flag to print to stdout and include additional versioning information
- Includes Insights Core 3.0.3-1</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-1" date="1516276800">- RHEL 7 RPM now uses systemd service and timer instead of cron
- Addition of IO and CPU cgroup constraints
- Fixed memory cgroup constraint</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-2" date="1518004800">- Correct the version strings in Obsoletes and Provides in RPM spec</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-6" date="1518782400">- Persist systemd timer config between reboots</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.3-8" date="1521028800">- Resolves: rhbz#1555041</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.13-1" date="1581422400">- New upstream version
- Resolves: RHBZ#1795256</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-1" date="1588161600">- Removed printing to stdout in cron script (RHBZ#1828778)
- Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
- Update systemd timer to use timers.target (RHBZ#1798373)
- Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
- Update shipped core to version 3.0.161 (RHCLOUD-4457)
- Enable automatic checking for advisor results (RHCLOUD-4558)
- Ensure dependency on coreutils for timeout (RHCLOUD-5131)
- Build system converted to autotools (RHCLOUD-4333)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-3" date="1597924800">- Backport patch to disable sleeping a systemd unit (RHBZ#1870658)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.1.1-1" date="1606737600">- New upstream release (RHBZ#1899592)</changelog>
</package>
<package pkgid="d58c04972c152506ed583bb14ec1b282ce7a8a47ac5113cba72f3c874098f688" name="insights-client" arch="src">
  <version epoch="0" ver="3.1.1" rel="1.el7_9"/>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.1-5" date="1507118400">- Resolves BZ1498581
- Fixes sys.path issues
- Includes Insights Core 3.0.2-6</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.2-2" date="1508328000">- Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
- Fixes version migration logic
- Fixes symlink issues to old binary
- Fixes short ID analysis for images and containers
- Fixes Docker library detection
- Fixes image and container detection
- Fixes registration execution flow
- Fixes --version flag to print to stdout and include additional versioning information
- Includes Insights Core 3.0.3-1</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-1" date="1516276800">- RHEL 7 RPM now uses systemd service and timer instead of cron
- Addition of IO and CPU cgroup constraints
- Fixed memory cgroup constraint</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-2" date="1518004800">- Correct the version strings in Obsoletes and Provides in RPM spec</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-6" date="1518782400">- Persist systemd timer config between reboots</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.3-8" date="1521028800">- Resolves: rhbz#1555041</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.13-1" date="1581422400">- New upstream version
- Resolves: RHBZ#1795256</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-1" date="1588161600">- Removed printing to stdout in cron script (RHBZ#1828778)
- Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
- Update systemd timer to use timers.target (RHBZ#1798373)
- Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
- Update shipped core to version 3.0.161 (RHCLOUD-4457)
- Enable automatic checking for advisor results (RHCLOUD-4558)
- Ensure dependency on coreutils for timeout (RHCLOUD-5131)
- Build system converted to autotools (RHCLOUD-4333)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-3" date="1597924800">- Backport patch to disable sleeping a systemd unit (RHBZ#1870658)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.1.1-1" date="1606737600">- New upstream release (RHBZ#1899592)</changelog>
</package>
<package pkgid="857edd42fa4414574c99d421a4ca233b6ff8b10b14dbac3192a193ba2eb5694b" name="insights-client" arch="src">
  <version epoch="0" ver="3.1.1" rel="1.el7_9"/>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.1-5" date="1507118400">- Resolves BZ1498581
- Fixes sys.path issues
- Includes Insights Core 3.0.2-6</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.2-2" date="1508328000">- Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
- Fixes version migration logic
- Fixes symlink issues to old binary
- Fixes short ID analysis for images and containers
- Fixes Docker library detection
- Fixes image and container detection
- Fixes registration execution flow
- Fixes --version flag to print to stdout and include additional versioning information
- Includes Insights Core 3.0.3-1</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-1" date="1516276800">- RHEL 7 RPM now uses systemd service and timer instead of cron
- Addition of IO and CPU cgroup constraints
- Fixed memory cgroup constraint</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-2" date="1518004800">- Correct the version strings in Obsoletes and Provides in RPM spec</changelog>
  <changelog author="Kyle Lape &lt;klape@redhat.com&gt; - 3.0.3-6" date="1518782400">- Persist systemd timer config between reboots</changelog>
  <changelog author="Richard Brantley &lt;rbrantle@redhat.com&gt; - 3.0.3-8" date="1521028800">- Resolves: rhbz#1555041</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.13-1" date="1581422400">- New upstream version
- Resolves: RHBZ#1795256</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-1" date="1588161600">- Removed printing to stdout in cron script (RHBZ#1828778)
- Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
- Update systemd timer to use timers.target (RHBZ#1798373)
- Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
- Update shipped core to version 3.0.161 (RHCLOUD-4457)
- Enable automatic checking for advisor results (RHCLOUD-4558)
- Ensure dependency on coreutils for timeout (RHCLOUD-5131)
- Build system converted to autotools (RHCLOUD-4333)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.0.14-3" date="1597924800">- Backport patch to disable sleeping a systemd unit (RHBZ#1870658)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 3.1.1-1" date="1606737600">- New upstream release (RHBZ#1899592)</changelog>
</package>
<package pkgid="ff6107ffe94f326376507693575796dafe94ce5cdab19e76552382576e7905fe" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c910cf23972d340460002ce3a9bcc6980ca0d1d771159d904acc17ce8ee10932" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3da9e536ca0ffb72f4ef5f3fba57173fe6c9c9c81df60d47f8139ac25bbcccaa" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8633352e3d5dd1174017547c0adf62a78edb9a31e4655293821c5327a94895d0" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a86d54765c4c9544a7509658c2b701a67cc838327d9f815d25c3b314b5b78ac4" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="17c1ebed59009c4897bc5e135214b127322748e38caf5dfdaede7432d2a47376" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a629cbdc8d51e9bc424e06439daf02d7d2d7012e4cc8691d3513b69502360630" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="e396e0ad12815dfb67c313ecfd7f63e0e882540eb6825eb9bf65e9978ac9886a" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="87bb4ecbf086fcd285842beb50356fe827f9cdad24dd82261b55b03ec300d3fc" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="a3bf86a22e30b8f984ab27e8cfb2b0b71ceec0c3640debaebeb7be5afb1f709d" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="823a1be17a1b388b1d6d56541933aa3a93c84729d0bd74218ca8b98e5713951e" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0eef8018334a4052fc189a2d6c4446f3cbedffad34deb3145e1e9af86a28471b" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="444b4914997c81878632d9afd5fa491aac838960b237d78e0c0553c4d84b115d" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ff1c370daa4c9998a6684b4f851d98faa22dad4bd1e15e0b649a68a7693b212a" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4d005e8a8c827b28699c109983bfa0c43857fdb1b59640c89eee398519e0e28d" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3882b274285c0bfe64292dc0bc3fbdf8573cf635ec17f6ea232c4e0c55ca112d" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3921ffbb9c06cc721d767182a3fbd984d4f5a9f7f62a8f8f352975d9b901abb7" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3c599bc08cc8ac6b19e5577b81c5be91ca196288abd5cdab480416b390a71df7" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e649984129e4b41c1b40b61c2205bf2257f5d7bce4db68698a9de4eeab91b74f" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e15a677e994e2ddc30a5bbf89920874c92ebcebff4d0b489ec9eab79a2429650" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="94f504c96653f7000e5a13db8ec0adda20e72a0a217c290b95bc593b170c9b89" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b68cf861b8a15b3737d12d786c8210adb73eb5a70dede3b5c4ccdfc9c338a9ae" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8f1199a880c19ae962b2963d1eceb1f79afa442f572ce843beb89a359840a009" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="33c012577fae86eebb8b850f4870a56f34f3ae121b52fb9e2af8d7140b8fdd60" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b4fd0073435193e94846d59a201fe06d1f885a4d80faf4a2845917d4eb8b2dd8" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="38f8490bcc6f49cc22a79922439ff2793f583b4ae3d46e9a63eaa408ba16c9ff" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="64f382a4c614bdf80ec324dd023a9da7d19c62e77a2cbc27c6f457f988283b04" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f5501f8fb8772fd0c72046ce8625c97ce68bde38439585f36069c9c681ea1db2" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="983f096d2907ee24a5f35f3579085d32bccd9e9b0a8d020aac3955df57337bf2" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="147cb01d8684707871c9a0c9c72436e406f4048707c747d5158a06ca74bf167a" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="d92655820c4be50eff8f3212c36351ef615d6199cf6fce5e14b8d1f19347c5b1" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="e66274f4a6050c634cc477948f473e62e18452694a24d4a028dedae2727263d9" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="dabab2c112327ca0946daa9caa611bd85a1bd2989ba24f1736042d719c52452c" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="52f10ae2f10f1a0d03591a2d89931d229130d9f932b15a4d1648337541051612" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="280493c99f0c5937038af0b6fa92fa4a69e7055e0423afa7f2983325b68f0d1d" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a492b354d2413c0254ae4287c3de60f7e22e6ae8df4bfc7824dff85520dffdce" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c9469e5a6ae5efa016bdf68b77dcd09f5536a725d04488bd363e00ee27500528" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="299c06009c4e57e0fd7b5c2bfeb5a2bc15664020c443997e3a5cdd65fdeccc0e" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c600450b308457696fc67325636491c6fbbc35e54afcf39b9b5eed6ed674e4f0" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5736ff962bd849d8471ca34e9df34de7405dda02daeda53e4f40da5ca9cf204c" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="75315d3558b0d0f9306ce3be58f391a4c718f28d1c6bb0afe602a16e89768f34" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="18284fa44f298d92cb3a03494e8af34640c4634283e65ef2e9a8266d44aa4c8e" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f464b4050b96d058d56284a8bd9a9c8a08ed44003353349e148742b95fe16ca8" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e53f480c2e7ad5c51ad44779795880c97921aab5332953d332bdaebf208a3704" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9343e4a34065a31783c4453b816f6043c50dc8f9921d4b31c7391e52bfc373ed" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ed0855ded8ba44a91a5f0dafa783d6be6cfe4a389919c1f7a1943967c04a6a31" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9216755bd0513789bc4135a1f11c88c1c3f63244db9295fba293d375deba4335" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="231587c9dc35e4d67846240723b185d5ca77ffbb05c362352974fc1594318b7b" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="bd614d0ef413b4532e667ad400327cd9e142aeec7e83c958fed6e14b44aa2cef" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7cd84cc1a22b5adb66ed9361e00b71e5d33bbbe455f139bf3751730048d01e3a" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="52096ad198ffbf0bf1201d39ecac80ef10a4c85732567cb3989e8fe5500c1f47" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="3172d9a6d43ae7c82749d3a58608fb5520ff327d21de7f266c4f6565ef64ddda" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="d385e42ca79ee3115a22370eb5a1b8daa1a5a1d1d3b518c4e3884a52b9dac3f0" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="51f4223753843886e2af5784417f82ada02681eda55d990ee1cd62f1be44bbbe" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="82f8c70f1f423b7f7ca8912ab23101b7dedc5af41c968356bd402df6b5246223" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="dcc7042148fb15965baadbb130e3b4fe51af565db8aac64f8be62c85fc52916d" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="78c213f66d5488d1d71b1bfde9a2cdc1ddccae55bfef0332039c44ee1943f6f8" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a26a2ae7866430cdc9467a040bdae8c215458be2197e4270ab46b56ef442e52d" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2d8c5f7ba52e1b40ee2a717c49dc45d64e225750a82e8135e4734e1667ab2522" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="35cb1a21b4025b96b2c451d5c78166788b55ecbae2a59f08e0796af56bcb540a" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d329380da4a3c8d2af816e178cc21cb6fd173692ee21fb3ad78e6cf6bece7f95" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e625b27b1c3efdca20f740ef421817bffcdbef11ee8525e908a10bf0f9910e82" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8b709f251ee6667015a7203b32b41c9523bd7126413d5af6031ddc81bfd9a413" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="66e490f560ed1e644155a0f86d9ab7f9581c4efda413155488c9032acb555783" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="777a0e7093efdf5a2878d7339a35dbe58abe5e37bdd2a7fa8070b6f568bbc34d" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f7caa14732404e4d45a8baec45db97f9896df89032a9a1f9d1855a7f3059e922" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f87a33a793af2d38c8bf366ae02833e60e731ccdb23586d390f7115229303b94" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3a6f94011ae51c75c9957d2af52c4e4221ab291e2b7166a93d446233850a3d67" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="78541ec6949f1d98a2a549fcd0901dd8f3d9c453b81180cadcf34ec61bc392e6" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b801661f87287fccac8a8132b9b6319a6661973bb9a0f606afe1d05daeef2fc5" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="941b03ae983aefd870e47896736b9a58c2ae0b9c08dd2a61dcdec736b5cba537" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b04fbbfb12a89d62fe0d527911aaec81b6c596f0d4563d6adfab319de0766ca2" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2015e67853b3845054156668f4352aae42a648c8282c632497e9f3a7ebc37f7f" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="6a8f67c65a1f46bee11ff30bb9826c84280264391b474d2af2e7d5fdc5b188c8" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="23f661188b2fc6d0555493dd463037a5f539370f515c0979b1445981c96dab33" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="0728effde03f07dd41ce7f11b8c6e1b88a3065df5bcf7f421d0acaec9efafcc6" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="f2766c9072d25cded8f43f3d184da8259143c6c87e36c1b51a277ffd0b54c85f" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1d7bb18451ca0b5d7a803cc82aa85db97b7c0c2b962baf9cc4d6abc5b55d90aa" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="538d2bce6da1f0043cee3a97071341a6d7f0c5b941a3190eb9d081fa8439e860" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0b3d1a185c66c07dd1808515492c36017e13bda1b32a2cf2ae0f2c6af49ead5e" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="792af20647d5d9b4fc3d3245e643fbfeb5b541a09116489aabe3e013662c588d" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4c1bd5347eafaf12cdb035f748ef327a9ed80580af31173c51bf4715951911a2" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5a90466dff192ce5ea054cee076c409b16ec1e10b00810fd203813d2b666a81a" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="627b2301c6a7c64f85d7db60f838963c5704b47a60e394b4ce118a710c13fd2e" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1ddeb5f4672dcef857736801e3cecb33585e5f6e3857ab4b9a3e3802c72e0926" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="67e6246c1e2c16502a91aa990bd7be7618db91bb34e2973795710dfdd80d8ec0" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2581101869323cfde8901b5c7b27ba961a144f657d32eff19f8c0213dea95873" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="75d06bad3ae40f32f4ba58893315a6dda0e93281353b9b5ec6efdd951dc2f848" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c2819d26830134dee63b5589d6e2a49e7aaefe7a1a68ae9f4ec0555f5c95da77" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="af0c2d68f34328dfd20332c467c46b149f2445d62b50c4949656572065bc881d" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e7e671c1cc735dcd8eea0f7b5df889dfd3d897200ff667a1aef72db67384eadf" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e5bb9e8044ebf19c5a9c203c1e5fbb838976db2f20f8fc60cb857187eea5097a" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b2d3a0b0963d90372297ddaf1abdcd7c7a61f33f21f2b3c20cb0a6e4e84f160e" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a7fec73a2521bcbbaab121ffb65b55d46c382f3007ce56fb57cda5954791dca3" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="570a639b68179e6bb96a29fa8d778e1c23707c94ef151e2c1c2b5721d8b0a760" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="a1502bed830a00e45b16fa1a2615df138a26fcddcc3cf33088aff779c63f4b49" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="cf3a135f693f542bb7d1abe5f95488c72aa24c0acc65eb1d1f75b0c17e1a0322" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="37d7bd190490934aeb523b36472d09add9bab8113a72a801dfdd6616aa52f841" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="8232cfb9bd5166440cfb392230758b922e343211e8c3bdb51342aa01adac1c5c" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="da5c9fb1727a92ff1eff81b69fa20bd770c0c18e72ac881b48dfdbf341ee265f" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a80d9d41c2a2eeb807072dd6520a7e14ee7280a9ed6350f6fa3b13bfcc0bd4c9" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c927e429737fda8e58a2d31d520747fd86e61fd083f59c7e6d8f48406ee5d5af" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8b90cdda99f00b8d6ce9df888eb2ec1aa133def6991b29721bdeace516daaa8d" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f9ae569e5bdafcb9c964b186928e5875702e05033d3e7e03014a50590eebebc8" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8a2ea4fce03ec33d2d790cce553439c18495f58a15c34c83275214f4adeceecc" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4e17ecd31a2cf2583849164b29c82579453c8f9b031cc342091dd1062765472f" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="40a9321c19f27b367219d928612cd462efd25ec432758225d2e41161bfa6a86b" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="41cd2b450ee366506a9f066104089ca3ed5b9aa76c94bf1806c9e724d6e2144f" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9d8b6eda603b19f8bb6aff0a532cf1b99d634357e469ce53c7c73b984719de5d" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="52de46db85d81ddadde3d117a2813d026859e6d31eedd439f8510f7d237f54af" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e3b8a0f641b4b745255eb858fb5a9cafcd6d0faa1f25c0b696f40ffeb1df7f6a" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4a6aabd2a4838b5bcb52ff6d44185b63f8b3bfd7beed0f6b8b8832e833c68fc1" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e3afb41df56a6097706dfef7e42ac8401b2bde371727e8d400b2fab5dbb755af" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f00086db078e43b9c388f552359134746de3ccabb27ff6e13b691b98d564ff73" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="deccb7ed664278637b7cd2b22ca408b07e7509462997bb120eeb6b893cc9d44f" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f6e403049f82aa1142d39626467f554b23a0fdbd3df0db246d80b90960f86be6" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="aa3c0d706782bf28e1aa22fd5ae3490f0de38de989f6cf336c9eed09b21a8695" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="884a4f324cc4501edb2b462e6d6d0f97b8a03cad8a8a47b5749ec273a078646d" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="366ca6ac6b702ae50288369bd5013b9923b04b760072421923c8ed35f88553da" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="536e097cc2f73a110f43bb3da3a729d975081387ae4dae11f38f886764e17953" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="4cea5b7058b9b1aba19245d715df7ba8df82603a17c19d9eff850a1fa794d87a" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3c20c006a054d81be7119868833e05b6979391d37159967b473169e6731753ba" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="39c0276f274f745486fb85481d592a514eebd201c106b82f3dc33b234d7e14bb" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2d3ff6ecd45c5951c56bddfe392e44e0f371472b92ddf5811d2ebfc24687a027" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="494ee56b0b77bab88d7209ba04da1cf8d94fa013a20764b530ff8367deb7f6fa" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="bbdf09165d17af7b68dfbeff67a5cb6ae700c9895caab891afb8ae554a591ee6" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8c7c284396c79504a1fdfd5f7ee4ea41a907bf29029251ba3dc81d51a0067d76" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="eb4d693fbe96f6950bece0831875ba27ed74be0cbd464965508b7204c2c129c3" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="972caeb82a487e8cb1294bacdfd65bd7186d59a1cfe322a7a2dc13310249122e" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6c9675fd5c024048be8932d1b01846e86e241354e21dd9e589e173ce0a5eba0f" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2434c795951d1cd6174a5ed705e87043e549eb4d33b168d892b07bc3f778191c" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="32ba4413145074d458caf6e8c2e88cf332a3eef9d136f6b46f1cc959141e5ec6" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6eb42571e455b678269f6e1b06953b0f04e6b95447ad84a69b499e236eb5f6f7" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="db0372e4fe4a3a0558b0b43557568bcc5de148d33d935b866a667b218c70605f" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="14b7ea3f419846c0ecf7a60ff33d1446d7b4375fd72682ad5e3a6420462af7d0" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0234cabcdd1da50415a2bb34eaece53a8c2010714ef34ff0fb542813b214b518" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="918772b0b9f7467d796217e0ea9be6feab530694883b5698a18ba34bb2b30c52" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="780ed93ad909e005c9c4e48d35a284801c2e99ec9c0eab86e6513de20db0f208" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7ab43e7bddd28c57bbd385e7614e5fbaa9bfc99e18fad2b1fadd01ee669070d5" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="1e4de43007dc23ae6b6c528b0a279638d05d9450e8ccb99f5af2b0b1e74da557" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="842cb317705d4404acf5a1550f6f5194f5da102e7d1ed4f0bdab9a4295ccfbbc" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="cef23db6f5d92b90d1c45bba01e93e5c0bf1fdeb0592b4933e369f4c90bde291" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="022cd88211de1b3bb8a7b69c1edc37a52c0315b0d6e96cdc6aa9eee4fe6ded96" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="acd32267012e86a79ecff73a56c87724af1ed5d0ae82688ac4a25601164f263f" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d4ad3d602e7e1378dd782acf79852393bed441920fd4e897e378318dc3844676" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f8d40c0f3f9ed707299803d8af5fdc520be7931494a515dd06bb2d62d7b01937" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2b0e07bd0700c5f6980e07c26eea1fbdde0d06ab21756812f7d299fac46dce04" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="26f90737e00ce7846e8ddac4ae6d090a64b0ce680244d207a8a591c3c26b5b3d" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d7d9a8193a78e156c7ea9cd767f61b715f47f69318e57f5c98c3b2ec59dfa754" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8c9faf06ac715562be0b0f36018e831f204ba1c429c4613919405ddc42bff397" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="36aa97c8c714e18a6e0171b54b4cb25dcc772e88585e1eccd5edb4c9783e2830" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0e0d4d26c5c4bc9be5c149ef78f5eefcc88370420124beb02845de5f32438ddc" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f6837190e8300c6b8f74d44b35306b1141e38c89ee510eb4721eb2871eee00ad" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="60ac2909d9ab3a2213ee563c1767d3998fc7b0b6b8487f136ef2147bf4ce40a4" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="53a401481e4593c2aef48dc2b66754f3da6f51b7a08cf5675920b0fd3a5edf9a" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d6af41bdd746236b680a754fe995743503ca4a8762da17a625f279ca1612316f" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2fb63723e64eaf4c934bfc8bb76df49a6d9fccd43b1eef1c64052bb0b3b2427c" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="153914a531d37a50ae7ed3cc067704678c3edd12fde6022b6f409cc7278b6a75" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a1651b6f58d1cb6f00a37a7dd5b49ffe350cd93ffe242beaaf764b041e1058ad" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="90ba7caef5a33207d418d7b9b415cec692eaac61c5ba48ee32c23bf0c19d78dc" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7149b1c062c57303ad054c58716ce4c2cf98f2619ddb2e5f5e8de8339f550758" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="e20261d5823cae1ccfb8205e5d897b1a904788222ea6148f255fd80ecc3e20f8" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="dab4b4a4061eb473c862bae44feda91f8b70dbff9cb89438e334a9e289a4246c" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="efbd56d6582cffedbde5595a3776a94ec03a522104abe4ec91222d353805ca93" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="23003d2832243116c5cd9c078e08c25ca213c0ad5780c4c5c35d5ab71c5fd21a" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b052a530756f84b493cad28ebd41d1c61705fbdbb0000e8beb132ea4fe130d8f" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1a77e0462adc5ac20f9b3a1b462929b4daab378ad67cf1745a048a62ad8b9b02" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="697164161a8a92a0c3931986f8b1d0ba5a0fe87d81f7a55ebc8738d15ecbb3f7" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0f6e0a2bcc9301bd3a0085291b379ef93565f913ae4a8f2d92b2dba946abedc3" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0c2ff79254a6da35c0e4b17f6533e306c0b4c15fab4eadcb11fe834b5dd1e4f7" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3382c37825aad6423ff182721b3b152e7ca2534714b9fb22b24530998fadd22e" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9096f3fda12d0e41ce8c0056a627a03e07437722cdf44cfa0155de3e812a5a41" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="141e5208e94eb13f33a7fa76e2c27ac360b5c0c373b598248c541b6fca401f85" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3c58b14203c2ea269201eb829db52a3b3dc064e4a57bb0c1a2c8a584fdf68035" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e5ca8cf16dac50931fe5ad451ce1bcd9bd295c94c2c5a7586f1412f1b9884cbb" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="24bb8966f810eaf901ecda1b69e3cdb45dbcd35ebfe2bf066f47f7a7950d95ea" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="12cdf7ce6e8705ff9cf2688c543896d22d718b8d51fb9ef4ffe9f86365b74854" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1dd53c3cfb84a8f4e53b319ecce76d21051e75fc6368dd70d2ebdaefd62f5d9e" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="43db7bb77c49193fb57b7797c42e4432feee0e3ebcedd41076752a16391a587a" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="944e731e0dac4d150796a4ffbcb3b179f2cc3a2e33d28b8445eacdf63f870932" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5a7246d2bb0ba4aaf01423db95874e99baa1adaee46198dea9f6e2ab21a257d6" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d5ce73fc4c3669ce9b4db5443e9463c26730839221b2cf30e622a6bf634c8bc7" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="94e6a609c6645b3ba848bb831e4752cccdfc8e8c23a4a2940acd17ef461e2c00" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="f39fb471263ff9f158477941b6011298eeae43228d6ff774d995c0baa3e2eb6f" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="31d6c69e09f89f8858c35f8dd36b4e45cd666fb92583cafd1bc50f87b44b5fb7" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="dfc0e60111da781a13db41d13b9a8f3dece4500dc74e73e2b7c2e6f25bc67687" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="d6562e40080d276e0b7cb879da07c33fa1cf7bc6f3d590e19012801e53d31007" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="23d58235233ebea3555b69f308f1979f4b90868a68bfd56d5213462699128509" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="83185f15da5c2fa7e0887468b33a6bd18cfa778d5667ede9aa877c6f65146826" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2e80fe8c0517bb005cf08f6c1c4f38ac2ce88ad34c597cda0f3cda2ae18e7d4e" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5e7a4ba4ca286dc634cab99009f0cdf03cdc5c9ea2177c1bad82d8b0812266e4" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="dc13c99845df7263479900cbd90a4bb5a1687590a80e3c47db089350462a7e15" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3eb32b58af8886e809da95ebcc473a899d88fa8564700775cf81269410100a36" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c4401b31269b87b826730f98d4a54f3035831d9f1773a2c55d67b3310d72e125" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="734035f1769d9dbcb9cc6104881244f41c79583a8f60057b350b01d765d9fa07" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="968b9a66f0f931e752db6b90f7910a6f7501b84b417e6564d11cf7cea2aa9a28" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2782efb0567f0b50222f9aa41e208fc8b6174afa9abe557628f9ceab32a94876" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6ec9e06ceb7281f9e79f95b4e70a9dc282f7241a481983dc9e078638dff4f479" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="034ad1ba99973b710ec2bf40ca394bc0f2d8456bd2d5efb9f0b87e34f06b2d4f" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="74d8bcc3e4709ea28250fd9f4c0c8538b9fae858f9dcb94a5723fb460373f681" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ebed10e19d2274d3a473a9f93070b6c238eabf8318fc364912fac682acfce8a7" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="63aff05e2fb11318b15efc6bb916b2e2d71548cbc332462a2a03a5bf72e4c4bf" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="78bcc86026036599210cccd18883e28d930159770e2cbfa8d2fe7d08b5a24152" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c1914570f132c1a2133a61b40f08b0ba475528e31b536f70078a46a0099b9be1" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6398c1e72e66fad340556df06bff4583a0a8364985370544ddfca65bbfc39d34" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="e26ddf1eb8378567cc53b7ffd0b35b66675789be17315ddef5f856b2183b1411" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="d61ea0f69972915e6c0f32c610379ad6afcc439b0482d4b0c43bee5bd615fcec" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="cffc24fbe4b8ba57731c084bdecee306f29e1085aa72ee20a3c2ed81088383ac" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="6900a89d9e962ac6c8a8b6541730efba97523f7f19d22b76e61d840d97290800" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="689758f48a893dae084400fa7affe4aa13dca47ad8c0faa5d82b2be95894bc45" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="aabdbecd0ecccc1cd5da9f579282ad80a31e2eb34c5c8ceb6610bf12196b1351" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="fa22059b33ccf512515efb637c6130e16ee6e96b204ce76ce107d12ba95ea028" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="136ead11f9367796edbe649c17eeb9d498759a52b3fca2f29a53aec5e1789b0c" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="514e820b7d64bb3a9b63963eafb16e47f5f82f71c4469e37817b3fde23b69bdd" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="b7c28961445b8e478551e7e888c1ebbd2797bd6e65bb9582265764b41e3e1e19" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d9d7eaa7a646ccc29ee9d5852dbd04f05cda07368ab50d37f99542daa82bb711" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6b2d7b6e935294d74ae7fc2eef233b252cad47a5472ff63efaf50d23f6ce3553" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="89a7ac6a33133c0bfa354705718894270fefddb78df0bc16524fd472562bcc55" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="48ffb9e28c975459114d015ec36acfa9a13dc3fc90b560eb655cce57ee91ccdc" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="bf76c4e131cec40b0d6dc3fed92e83f82c3e5c10f628ef560ebdafafc006738c" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="11f8ae9dfe065dd73ad1ec7dc434819991bbd196af11919944ba2bae50968d3e" name="iperf3" arch="i686">
  <version epoch="0" ver="3.1.7" rel="3.el7_9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.6-1" date="1488369600">- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial build</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.7-1" date="1489060800">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding latest version before including iperf3 in RHEL-7</changelog>
  <changelog author="Michal Ruprich - 3.1.7-2" date="1489147200">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding requires to spec file for devel package</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 3.1.7-3" date="1690286400">- Resolves: #2224558 - iperf3: memory allocation hazard and crash
  (CVE-2023-38403)</changelog>
</package>
<package pkgid="e95e50167c064c90c9821eca745c30031598d4f7bba024d0b7a629653ab48ce2" name="iperf3" arch="src">
  <version epoch="0" ver="3.1.7" rel="3.el7_9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.6-1" date="1488369600">- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial build</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.7-1" date="1489060800">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding latest version before including iperf3 in RHEL-7</changelog>
  <changelog author="Michal Ruprich - 3.1.7-2" date="1489147200">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding requires to spec file for devel package</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 3.1.7-3" date="1690286400">- Resolves: #2224558 - iperf3: memory allocation hazard and crash
  (CVE-2023-38403)</changelog>
</package>
<package pkgid="46550f6b5f9c7dd24f58015094b7ea0d264d338616180de2a2a6621a29738ad3" name="iperf3" arch="src">
  <version epoch="0" ver="3.1.7" rel="3.el7_9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.6-1" date="1488369600">- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial build</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.7-1" date="1489060800">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding latest version before including iperf3 in RHEL-7</changelog>
  <changelog author="Michal Ruprich - 3.1.7-2" date="1489147200">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding requires to spec file for devel package</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 3.1.7-3" date="1690286400">- Resolves: #2224558 - iperf3: memory allocation hazard and crash
  (CVE-2023-38403)</changelog>
</package>
<package pkgid="98302d132a1546bb03f33f9745fe26b1d6218bbafa59ef850d92f0d52f59d0da" name="iperf3" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="3.el7_9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.6-1" date="1488369600">- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial build</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.7-1" date="1489060800">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding latest version before including iperf3 in RHEL-7</changelog>
  <changelog author="Michal Ruprich - 3.1.7-2" date="1489147200">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding requires to spec file for devel package</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 3.1.7-3" date="1690286400">- Resolves: #2224558 - iperf3: memory allocation hazard and crash
  (CVE-2023-38403)</changelog>
</package>
<package pkgid="6213d16f167a242d475f7d900f57187812850096eceadf42c69c170e118f3dfb" name="iperf3-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.7" rel="3.el7_9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.6-1" date="1488369600">- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial build</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.7-1" date="1489060800">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding latest version before including iperf3 in RHEL-7</changelog>
  <changelog author="Michal Ruprich - 3.1.7-2" date="1489147200">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding requires to spec file for devel package</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 3.1.7-3" date="1690286400">- Resolves: #2224558 - iperf3: memory allocation hazard and crash
  (CVE-2023-38403)</changelog>
</package>
<package pkgid="1fefbe4e2c1d2def377c4634174c67175543988e71f8c154e545bf967dc7971b" name="iperf3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="3.el7_9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.6-1" date="1488369600">- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial build</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.7-1" date="1489060800">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding latest version before including iperf3 in RHEL-7</changelog>
  <changelog author="Michal Ruprich - 3.1.7-2" date="1489147200">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding requires to spec file for devel package</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 3.1.7-3" date="1690286400">- Resolves: #2224558 - iperf3: memory allocation hazard and crash
  (CVE-2023-38403)</changelog>
</package>
<package pkgid="fa52019544a086c91d1d3d951745ebf76ed3bb2d3d4b9c4dc271bc4e9b8e6b0b" name="iperf3-devel" arch="i686">
  <version epoch="0" ver="3.1.7" rel="3.el7_9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.6-1" date="1488369600">- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial build</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.7-1" date="1489060800">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding latest version before including iperf3 in RHEL-7</changelog>
  <changelog author="Michal Ruprich - 3.1.7-2" date="1489147200">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding requires to spec file for devel package</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 3.1.7-3" date="1690286400">- Resolves: #2224558 - iperf3: memory allocation hazard and crash
  (CVE-2023-38403)</changelog>
</package>
<package pkgid="80612e158d0cc50d9af1b0bb947353aeb953ec146c08dc0e8c6f3e7ad40733aa" name="iperf3-devel" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="3.el7_9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.6-1" date="1488369600">- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial build</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.7-1" date="1489060800">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding latest version before including iperf3 in RHEL-7</changelog>
  <changelog author="Michal Ruprich - 3.1.7-2" date="1489147200">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding requires to spec file for devel package</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 3.1.7-3" date="1690286400">- Resolves: #2224558 - iperf3: memory allocation hazard and crash
  (CVE-2023-38403)</changelog>
</package>
<package pkgid="e4bd76b7a3967eedb361d1eda98152c1d86bedb3bb955b904a4d585c60b3d955" name="ipmitool" arch="i686">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="55bcafa0d367f2dea7021e63780377d7fb117d6de6e1fedc8d7c618fe99861ca" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="7eb187b856550f3fa255edb1a306a34778a7368d77b9b5770195d68f6ca62c7f" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="0ae4c3f627b90d777113506bdbdc6156d616466fb2a966aeb9844568aea5c820" name="ipmitool" arch="x86_64">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="29629873cbf3d9ef091a2ac44d7e41913fa3255a65df1cc9b674e6e0ee3a3755" name="ipmitool" arch="i686">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="13503e0a546d91f38e1a7a727634bc21a33579f44e4209581b5822fb7820b355" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="586f291f76037ebd330111a445800cd1f25a9921121d0ea2195425caa9b8f8ad" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="4f2fd0fc73d47d8823d030197d1c9e19e0582cb8aa499748c3d4a0677c879d6d" name="ipmitool" arch="x86_64">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="ec46ca38d12c0ad8ef04d4e0b780d1f24a374dddc2e36cea7c66b3e175dd9813" name="ipmitool-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="cbd44be668bb3aea87076e05f6fc88f7dcfe74d4bd991235ac2a2343dcc54303" name="ipmitool-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="f4df215e6f70fc69b0be6d3b81bf1f0cb03c54b95550c9bc9ceae77b6908a393" name="ipmitool-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="8e1c75a713cc9cc6b55977c9382bb5c5c4c2a6142f2a9d570daac2200cc4095b" name="ipmitool-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="dbcb862495f2825b6f6e8a1c309af884b79b095ca7e6059863e957fe203f1958" name="iscsi-initiator-utils" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="be846bd0aca197a14f916dc30a114663c860a20695fbe1cab5222ef634d9fe38" name="iscsi-initiator-utils" arch="src">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="3a5ed2d11fd4a1ae246e07f34fc67926296d42c2d3d4af48d82332e4fad2e630" name="iscsi-initiator-utils" arch="src">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="5c8e1f6dcb56c010534cba27d869230cc8be4787c00ff7f3c50f9e632e2a382a" name="iscsi-initiator-utils" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="f342a4b409ad93e47225e193c6138bfa93968a83514b250d7d41bf6ac6dd9e4a" name="iscsi-initiator-utils" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="4a549bc6a5b4090c728ceffe49cd08f289d1be20a0dbfeda9a436e159b9599f7" name="iscsi-initiator-utils" arch="src">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="f190df326ec73a76f01f60c6768cb5e4dc2b3a233e603ce2387a99a80924baff" name="iscsi-initiator-utils" arch="src">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="312725b61c7880d8f966574f6a0a0973818e1e979b8653719f697760788826a8" name="iscsi-initiator-utils" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="916684dfba0b3a6664c42cf1c1e7fe8d7fb7d8b94816589305b664ae7c32c640" name="iscsi-initiator-utils" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="f34f2c553c1ae4ebd82f4256c974432c6bd6e3f7022dbf896a0d6e49f60ea3d0" name="iscsi-initiator-utils" arch="src">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="76304d4d1b7b552f7ec9929d7611ef572173e4b28db16a8de723973e71542447" name="iscsi-initiator-utils" arch="src">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="2e1b9194fa5c256a617d020480db0666e10b325ad2afefe9cc59545b9c65cb2e" name="iscsi-initiator-utils" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="01684d559ae525509c8442a922e90af30fc292eb4092b49767519a58395792c2" name="iscsi-initiator-utils-debuginfo" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="82457292d970e9f6ee0f92a60b68786c5a7fc254a731d01fd4625201bb1ce94e" name="iscsi-initiator-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="fcfbe8999e5692a4e26ee7ebfd29a5003372e79307716aec649071618f68658f" name="iscsi-initiator-utils-debuginfo" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="eb075618aff7449b9d24ef9da1bf66ec0266fa9751487bd4544b72deeeb864aa" name="iscsi-initiator-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="8069edba3bf0796cb9cc6c4231f586086933c4cc0a97beeb2b8212746222ab69" name="iscsi-initiator-utils-debuginfo" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="ecd0d20b83aa44b24845f471ac6e5504ffae9250cc7d14058313af22fc52e962" name="iscsi-initiator-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="8deaad18d5fe92e3f388cb62532f17daaf8b16b5f4bff3339b22d333784ac172" name="iscsi-initiator-utils-devel" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="aa9acbda208d79f8ab77ff6bb0c96437cb3fbc6aa262956eaafa6c78b3de96e4" name="iscsi-initiator-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="518a688286f4ee27347fd681375dc1148e471e1039f2b0218a99729580e03ca3" name="iscsi-initiator-utils-devel" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="4d37e3cbf4bf015181fb9485ff99aadace468f29d9934ecf90bfe02a3e504521" name="iscsi-initiator-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="268adc440614a572e3e5edf70c1306bf423ba2c6e6d9df622a655ada339c3ddf" name="iscsi-initiator-utils-devel" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="6113eac5aff059114feee2591543744128f12554a6ebca7287944306fe049f4a" name="iscsi-initiator-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="d92d1ebfc8d647aae10a4615103be39f49f373f773f8848f833319cf36444d40" name="iscsi-initiator-utils-iscsiuio" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="518aa6538a05f934ce977d3a752877779b34055439c370c86cb6c90d069482a8" name="iscsi-initiator-utils-iscsiuio" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="55db7c40cc4892bac4ca64a7ef0dcb00e2ba3327821f6fecf88d317f7a677815" name="iscsi-initiator-utils-iscsiuio" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="e034d90da2717bac98ab5b3043a507686312a457d9222da50730f9f9524e94d5" name="iscsi-initiator-utils-iscsiuio" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="ab05a22c86f435240759500c2119f37c34c2adcf2a3de3e0fac218a43800753f" name="iscsi-initiator-utils-iscsiuio" arch="i686">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="d0a9fce82faa5ef9378fd5a7bb34dcc71d7717956350a938616906fbf15ed475" name="iscsi-initiator-utils-iscsiuio" arch="x86_64">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="55d4b7657c71c03061aabbdb912323abff87696461e003cd187d36be2a4c85f7" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="3cf392e202f567f8bb91a82b273c05977e411354a4bc7a9797428c9beab5e8aa" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="d6b1e3d86e76bc3b2c32b2c6fa108d8dd103eaf13fa107756ac9eeb287ce2679" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="7cbfe157a2b44dd5c32e528ac6cf1e116afc03f83f6911cbdccf7080cee297c0" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="a6555387de8d566e8cd09f696cba30818ba59b51597e56e8de11020797ca9b9c" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="19801f8034598fc6a32899dce8d3e7f3ec4f09f4a5688a37320ebab36ab91f4f" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="54253c34f0b5f53ce7803b15b6d2e5a61c749bd98f8bf6de0b925762a17d4828" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="89038c43ec07cc16d9a73d97903ba7eef06ac77def8cf7d70bc4c3d17637685f" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="cc700f71692e6f47f465f593fd535f647d2ae088b9ae6a0a953d48dd9eef8b60" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="dae945c8a9e5477fecab5dc9b8ad9b5d940f7081bb02116fca1523f39ae7f0c6" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="423a73f5e0e88fa971aff04d916c9e7cdc85b654b1aaa2180274f3b11882c3cd" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="b30415753a4dcf1c014dea50fcdfa7c4107f5564b8aa4681cb68e93650775154" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="b549d2b9732a197c4f250cf31d395812622043e7873806285b00cfec253a7b16" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="a809431ce90481e6c3329faabc34f1e5a36222d70d72aaed7e18a9796f8126b1" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="5df7fe152e4c1ac5861cba395de5021f25732087c88adfe65a5fd2c6ada7ef41" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="64f744f19868f466eb604b814a6c98fb18535336402c1537d393eb054068cad9" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="0370384262db6d525417c4a18f33bde0cb74b8fb7e9e07537019c8b244bb96c7" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="32244c07e6eda23021dfd3dd8bd9e9e625c4e9074c4d60a36b5c3e2cc4fa17a7" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="55f2b7ab9aa64d99f1ac9658aedf658257fbc9abf37448e9cc93bbbc0a743d5d" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="5e3b0b45a45aa40871e53170157fd8c5a79ec1d90f8e609b5c1c1ff8ad4a9137" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="8ba1df80332431ca99b8bab0200dfba88a4285325581b02a7698ba774a1c0994" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="871c0eff81448e92e567b2c91d74c048a0a6dac5fbc5bd75e0653a00dd9926f7" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="ab6f0a0b00bc20ee3f2d60ab594e9ffdb3ba949f2354351a9614e938afb1858d" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="7ac0c204b7e76ee1d7c25674b852f029f3ac11ab888b277255a46fdc8e3823d5" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="e57e8b971d02cc44f7dd5879ab463959630b6b9ee5f2b4675c7d1525ebcaf5af" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="25.30.13.0" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="3657de7082e3d012a775be74399267ddc8ae928532fb509882784644e605acff" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="25.30.13.0" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="94962d43f31204dc5a5cd0b8050a7a10483a12605c836101e8f41f5f326f10a2" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="25.30.13.0" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="28a09e027f4007a4c4a2781f9b3a9319ea5fc334189bcaad94f6cdfa1c5119fc" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="25.30.13.0" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="5ec3403813db8133044ba78c20ac1ae79e4b25f677d3837894ddfe592698b373" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="495d5c797cf2da017380f610b522c5e4a755db9a28742daf5dce43756af413dd" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="1dc7eb212576dbc82307a8099e0223566b68c294e595218155c433ba0c3ea2fc" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="038c086e59b35335df3ee905e10e8c1e63138801059f954c9fd1059358c2f18f" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="114d6ad3dca3273a7f19e7de690b3c0240aa043c1fd59c42e5c3de20b4bc025b" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="bfd68644087ee6d66060aa75757fa2f45ad7e03327c4a2c1d27505eaabf2bed9" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="df8e70fb4d71e5add3c2d0dd6c233353e05419468b976e789e6b890fc8d3d3e9" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="9b0ead993ab642145dd3d055a0fa972891fec5d55ea3286f680c88bc4bb937a0" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="875dda4bd1fca00e9d93e99cc3d2c70e8874fb38af59decc9649e02361adef15" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="98d6e1ff6554eb5b491440011b97609a3f827f33eb0f67fc40c02eb6c38a3943" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="f3d08aecbc48188507fdc5cd5fd32440e59879e83a9cb127e6cf67a879a15775" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="b66329d3f5ecb09a75594da610e27505dc8832796e166ca8bdae2fb3bc802fe6" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="435054f7374ac24b013aeb0400956a38073404d1c7a74ad2519de67487804d3e" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="7174019ff573df3fb8efd8a4fc1d7cb3cf2edb9df5bbc679a6cd668a6dc75967" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="23a0806b00eec318bd67ab4a53fd8a38a759cbcc4157132d549b314413013331" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="925f7c340d113bd1256d45d777af82904a53cbb88dab08eb9da8773ef3f2eb72" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="13f6700f093c01c1758a9b2e45a3a212ecfacc3e06289505efacd62bff8532c8" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="cd7b4bf6c444ffdb22451fce3809d3401d6c0e1bd8847bd0df843257f93ccf7c" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="41cb25aaca9e10bdf7b92c2f45d1b623099df006a339b7e460554077412513e2" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="95c7615bb479b484058b93a1087b7b379ef762a721b7b830d6e91b98ee01dceb" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="ca58915efc0224fc874d0327af48ef358d5429e36c0aa2fa157d3b5ece01a178" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="d2e99b3040d4210f5e139958bf55e20d2d2d1c8c046ceb0297e591caf3eb5962" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="fc13bf4ac9341f51e0bccc4baf8a3240fae3a01ff6389c348a292e3b0724b16e" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="4484810b08469021302e3b4137a229420baeb0ff0e9663ed662c3266cc79762b" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="6abd577cf976cf5e11e25241000dda76eeba6527e2b821278e794fb0e815afd3" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="020c8094abe73e70d6c4cb1eccfe073401c294e51cbf0a83aeeb3fbd411e8ea6" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="625db53d65f8b81231a78a55af05be3983428566f51ae1d220446900fd747b04" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="bf471442879258a06dc5f0b2bacaffd7ebe7be81ed748dbf2fe8bb1ae2d47a8e" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="501241788558a9b2c6c962a8c37d8e129faafbf228b818dffacb43414f5a78ce" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="12b819d9dc8bee9413b953675bdcae4d07ded7fa49841cff40b112a0fbeea0f6" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="d5ac7af38fbf761bc79b3522e2b983a9685a6f5fc32f8546063425306718ec2f" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="dbbd7ca3c313c2185f9018d47888af88860c66713a0ec4a9cc055589128565eb" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="c8d930d7a2bee56149c08800ac225819b837292de3b05b69a2d23e2c5bea715d" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="25.30.13.0" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="30fe54c2012426a2b16c537d48fe965886f5bfc30423ba348f5c47900fc8d25e" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="25.30.13.0" rel="80.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="e8076b5062993e722cdfbcdd31371fb3f759387991585d83315dd289a0e6ced5" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="25.30.13.0" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="fee59c9fd149e391d9a4ee6d8a8ed6b96a94f3624a95e86512996d5f62fa2221" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="25.30.13.0" rel="81.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="a4fd4b51fb91019aae99071bfc367a22d49a29c7f54dcb8952e8690312c24d36" name="iwpmd" arch="i686">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="cdd3bef064c86fe8bfe7963b62051409ad91d34528c273267193297b4c948a20" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="26603f19c9455a1810573b2a943ecf597c5ffc8d0d179c1ec81c43d776684557" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="aacfb61437ec7735ba8fae01d3b03bba43b4f21c5cfbf53e31556d8284454e6c" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="b671644978b0af93ea2204951cae00c172a523c23ce9deafb2a0aa8e28d6d9f5" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="dd783b2347649288fca3c5f92ea9093738b724d1af2d65ce0f1ddac650dc7c99" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="6c952fd9afe860bbc595aa3fe2b0b942db0bf9167df7404aeb957a9040d9917a" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="3c6d0ce69b68f3655e57a3111736e56a5bb4bf3f7e3abc3c922eb5b4ecb65491" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="c30615f825d8ee1aeb20b4e82e63ba16edfc33df96b76d82993411d857e6b177" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="c7a3c56e7907f527041b5b74b097e3bdbef41c2c4fc76c6ddadc7262c27265ad" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="c9dc87929e6696eb9f147adc1ac1393d7bdeae3a920187c388af3b57aa11405d" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="d6c8dbac9951a1b990ff186e5b853f7a1c4516787ff71d524176e37de9f25d44" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="d9c645ec05484a65ba91c5160809ea6a19b9006ecd3a1e427e3548849912148a" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="23d5518cd3ef543713520d9cd05281f7c9059602ccca034ed2ea3fa190baeff1" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="c5ad212f255a042eae89bd903052dd3331eb87c2e8cc347d960810f7e0b3e9b5" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="c8b9d6eb37db0b3e2126292e641fc1e8b388c0c96795424d1637e87e55bac971" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="c176cdab104e0febccc58507dbc8bf5a34c966e5cdb6c36d7f31b30216d884ba" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="49ce50dc2d2885c9e96b0d9cdd011b497ae6249f2f9a00bb6b5ec64eedd49dcb" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="89955b6dd68d04d2e894b53c778a42fb03fede7b9ef5055d469571ca3a93990b" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="21e4d90a95f3602e390223ccf1aaaddb98d89dcc813e344cc4f51e5746dd27d3" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="bc51504eb4236a9c4f680ec9af7704fb283825396a2f334cc2beee46257e2014" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="097d8711b9a7b3b7d59447b2463dac0a74e0d680052ce6a9b1813360e53cfcfc" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="95e8c91d0c253ab70bf6580a3dbf95f714f34015e8900a6f30c298d0ffe93c0d" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="f10c751e5fe583b4aa9b2be51edbc3c735b761f5c509596c0c87dbf9c8a7f8c5" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="f627d001d229319493c28781997e34a4f5f6612a53e78f94dfccbcb094f8238a" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="ed375d37cde9d10cee743179e85353ba7a658064744878589810977924d83162" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="b389b6d878f08dd48bd9df2e6c36a535e0837f7b70a8ccd1a1cd3be286f21e4c" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="e0501dfb8ad8d82da2aabcb366d7241a7b7cdacd3f4f5a772cff932a1085cc94" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="24c182b4c0779a56cf6db7a63192884dd23660819522a734a0131189d252c80a" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="7a16b6e8b86551fa0545126feb189c9528ff55b40f966a4a837a183c1f844c6d" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="8a14ecd191b5e3d617e7efa20a37f3e666ebb1a3e7a278b546a943aef1bc4caf" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="cffd78dd992d6756f381afb6b7e673b023fa6570d7f3bb3dfdf672e97cc27005" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="1882135c10d90ff820e70335fe0a9ea99af0c8871b85c059732df823bf45dd91" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="93f1407b13a987dd9f72e8cd095162958643d00f53b24a47af0eb17221783108" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="9493c95adb8755b97eb6401961fa6334f43eeb8fa3b9190b704d23ffb0135e5b" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="a2ae9ad5f857da747ed6c9df96126e6ed2d1ed9345cb721d456da04735378b71" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="4e6cf83d1b78c8a4c3d2c6d55575aa43b5206e4515c68a9a2d6dbb05f60d7ef7" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="3a83dcceede4ae06c549702061ff83ec75ddf7bcb5819b70744f5cf8234b06e8" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="6141b5b43f21f5f126176172df3e859886e4e2b1397a2c3381c507721487ae60" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="ebaf5ceda172a7b2e5054319b32e10352bbaaafca6d8355b5cb366adab15636f" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="b13234fd0fc2892a7f25db76498704daa6e01eba08e4d967f951c5563ca79b59" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="ed07981b71b4763ee4cab9ece8869c1f3e6f37197800ceeec22956005e318e7a" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="f2732e72f0a983ff878956537315d558aff86da1d16a77fd953b4124de7f4710" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="8dd7b5184b245f8b76c4a414845896e66c4ac1fb8b0e472f2ca7b874f866aa42" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="b1236ae1174ae2648062c091fc44745076278d0d7d898f4b4e550bd5feddf24b" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="eab671e3ee7e36ff03da7b0b5b77cf309cf92440e70a17ab625dfb01bd0ea1e1" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="45d37352c52ca2c1d2aaaedf547ce955ce20164081e27d92f792729b05c931db" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="feecb133cc7161336ac82e2f0afe3dde083e98e2818a68090a2975d558cfda81" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="149e215a234eaa6626fbe795471a1325e259d54538f52d8ba80537a05bbc395b" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="4bcc4e8e8d6d123b5a1ecea82c86c5df0ddcb1517e12c7528838862bcf6a86c1" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="e6f4bf78434510130a703c884fc20afedb4141819cb50832ba41d85239f7656a" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="747cb57ac82509cfc0d1cb0024c792b6e0709b5f64490d7ec1cf35f319b33626" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="659e900273db5444362407e18646aef6651869a497f55fbf5a25803836d4fafe" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="f6034c3c917638c7065656b57d7090b2540a69663cd99829c2391f6849df1de6" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="59896a2c173e3a46df4ef7640916ecb4e56f73eda5f338f9200510124d3b57c4" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="9065892f8c9f908248ab8db70eb4259a85e92c9752fcea7c98a523bdfd206909" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="d01fcbb6f5525c662db6103e09205648f4792213d2761421da6cdd5945f27e6e" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="254b1f0aad694f57c3b081dc6d3370e468d694645a199ecfa9889b3f22cbc822" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="aeeb46cfe4fe7b8305f800b7ce6a16ad05bfc1330e2b4269b358f5b6991b520a" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="8129611406b817f05f6aa39870091d59c8e60dcd18f8019033cbd7c8c426b65e" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="8eaaad9719f8cf9d5187bb77dd3d01cafc597cd82a26ce903433e7543f110c50" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="17accde2ccc4fca47401a1160595f7e47d52a39230ffd65416e723fbf71e5c67" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="87209103065626388eaba714ac4068aecb481a260b2a496f0a69b2fdc390d687" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="0dea484cd7d523a94a56d07a5aa98ebd595b7dbe512b1dd1db3ec46142853090" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="f36d778d5bdcfca8d5a9ee952908edcbacfcdf941a66acd59e67c89c184cda20" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="18c31443be2799a3abab8c8dfd82cb878af436fc12ebea56cabe2550975647b6" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="5af4b1c1cac1d602ab51737716048b66a12007ae39755d84a2794ca286aa5e06" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="bbd6c839c783677d6103988edc07d0eb7742c041bbd22e6b397c4ae38c0b53b4" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="21ba7b543734fb2813c0a7bcc6ddd87edde26e32ad91cb9d56bda314ac41f160" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="eee0ac7e60f1abcb87b8f0fc875eafb65f2e45429514e9ebbc2112a25ea2202a" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="6c968128129fb64c1e7475a985e905e0ef4fbdee4eaf5bcafdb7334fb5a161d1" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="208858f28effdcd5712c6be409a9ba0748c8579b5e78a0d9c7e9a42abaf5646c" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="20da1af213f8250ec25d65487d86e0a90e609ef55d7200cca62f138ef972b370" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="e62172f7da9a8465914b94c99668b143d9c6f7870d332171751e20e437d60a9e" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="e3d3f9d37616da7ab64e0e7fe929144ddb5eef39d13ede8dc2dec6e0e0fdd6cf" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="2b4a27e4a71c4cc64dbc95372d1b168c2d767a9f1fa5ade0184ab1d2fb3cf153" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="89c3b226a8194d2288468df0d1c6010b9e54a2decc8fc86b799e4ff70460a2c3" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="347770444097d49aedd3677bfeeb02c8256998166f81a226b54807ddf03ea29f" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="cbd698aa72e12dbf75f015a234792619040295cb2be4d0ee5f697d5374c859ce" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="51e0c86f7b046518590ac5680a289e0bfdba444e5553e5ef54a7f99f20252d68" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="23b86c0017b53f0240c6179196ec495b9c6c3be6758cb430c1dc9fa7181cb361" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="294925403496082beeafc3e440bbb4c839d326c8df3c2c7701099f9ac7300ada" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="2239911cd99976ef51f939a62baaecf532bdea1d9745f1c9c56fbdf42faeda0e" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="f40743dd438affb4968594f1b4f3bcc38c59a6904546599feff140ca138e3307" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="f6adc59c26190095a99a017b93ce31bd8a873d7b910413a1cca4f6df51f02760" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="2e65a864c412a458f68b90c925c4055deb0d72b7e53a3bf9b23c7751c9ef7b2e" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="e2171bd3e447768e6645f01e8e0b9f2bc77f22e2faf54afa7330b0ff7863e1e8" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="833ada5ba03cd708f9455911db9f2f7a8e786f1ab069b6f320e4bf11ab33a7f8" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="9b52f107c9276e3e97119781cb50f8aaa696cd628b71d60e7122393cbc9a3a97" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="e2b807f8d13a8c610e293e06bf07ee5671bac624a1e9f398b8cd53b7e14ecb8e" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="271762de147c3818d3338d41960610c74f005ea68fb293e1016e835f89c27f9a" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="4b5a0a826054cdb6b54486b45ae1b59adc2b71038c1f54c9f499b716084d19ba" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="e4e16e1fd82793b9b1119a0f30dcab16530c548e3a61cf572e8ed805fc1d5030" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="9f480cb194bf7283e54bda9e9bea8ae5735d8fed073c47d185b126c4859d72bc" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="c20d7b2b8e36e8f9e5685e9f197747a63d08d6a2253e57479513a8f4bb47f838" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="a782209fc44dcfb328d15da5b4eaee12ee7e31830b5c8762ec027dd109e9152a" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="bad08fe03d413b0011141ddca2852a0cddfda53c13ef88f41a4f63eecb90562e" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="e9b641668d68759862b37926c6711ba76e763ecc54035be416d6fdf5b8ffa70f" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="3a7d1de279ee721e153551379788505e80a9269a6081023c654f4306f49075e2" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="4f9e5cc47a341ff0996e9fe87748acb686f0b746a34c9922561f6e674cc83435" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="397db8591c14c5e1253ca73448ef0baa4135dc66f728f4844422283e65f405f2" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="5ca38adc7d8cbe5b7a28ef1eab060821a4e5c59cfb88e9b8e1bcdeed9ff5006e" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="712b56f7a58bca2ab8776139c0bf17b435e8979865e606107708b411665e5e1e" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="3ed9e05ea228e3c7b7ff9f60c17f5cc8b23cf3413d077e8c113614cf271aba8c" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="b3a2d5e6c4ed399a4e6efdea4b305e05e508d71917254687d07aaad2776d11e3" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="30d7fe2106e4308dd351bf55de640c46c479bd760528ba6b9c22a3c364a40297" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="d37817a612e5062067b8d6fc46aecfad57fc2e2339e95f35dd6e494bf3bcb270" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="6ccc14c5f0abe5ed241c0166ea88870bbfc010e6310eb495799c6027c63b39e1" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="fa380f34414991ba115278386ef2b5b5aa6ff8503760192fb8ee95e019d53d46" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="957e9a25ad6b56dd714cdc0730df343527ac7907e5a0b04765dfb36187215ccd" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="fcaaa42620a7166d07df99e9d7d13f024934cd568ead21f18674d7f3ccaac6c5" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="20ec290cb18300b3f983d84e522be0a31b67ca2c549e4f5636971f28e259ed70" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="e06fbe928a5d6a62933b4228e8594c3779482a0a8d310b227d15ca5bb0fcfa28" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="23f35c6b8f3deae209263a2413828c6b27d2114aa3c442f61e5229631cb4c5d3" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="d8e8f5c17c4cfb405f175a79f8d4baaad0c2fb5991f4ebcaca3546c737fdff8c" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="e58b46a1918b46e0fdfe3ab0db6f7444b48989e2c1742c168fdc93c16f8bd275" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="e3031a01d8a0617d05112b9cceb2258e5c741f55a6b1dc6cafe0b720cdb86eb9" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="f640b3defc741f20424290bb3077ce9c5e145fbc7e160d14efcdf664a09efe19" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="ea0ad01fa96ac530b1873de4a2f38606aa43e5ed20c3ad5ce1f505302156487f" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="826e942d25d6cd5928a8c482f0c8e25c523682397b617f0a9e8fede6acb909d5" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="becd44bd37b113d395634de035bcc246ee7266f15f5a7a9a80c8ea84194e1c35" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="1cdd80c2f731d7398a1916824d338ecfe650522d6871821998359d74e81d2331" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="a5faf510f1e8c5482150d0338d05aa71ae2919f8e194b07dd39cf34e80ec7736" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="2f561d0d7b0ff6134eb5902855d8339c3006741b71c47626b506cd8adee76cd0" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="e1bfaf6934a7fb365aeceec1f35a0a732a2c44e79fef9d0d7fea19ce3f1a6e12" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="ac9d2aa337296164179d7b04fa3af73fdf0c1ea49be0ea8141866c0c06abd289" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="ea84e7d8a521d94901ed45c746561b4e230a769f352b3ca64c5a7e25c61fa7d7" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="b5ad08ea98b8ac9e2ff4cea632010076b50266cddac41b54441bbebd5b148368" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="bac28cb7bd7565f81b220427409e78a7fdebecf748c13e3d657839b67920b467" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="8289250648c1c9e10701f007fba3ed18dabee0d8cb8c7e2ad385ea9c3b17b39c" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="d09b0376f4a223d6acb04bd5e1ee55b6027f689a24e3e4bfd6ea5e6a72f9a229" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="a54261a70522e840f25a6648ee6a90d76f84c939aaf57f4447b0807d24628042" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="3b4f249a3ffed7e724a21be5d3d72a8b34f1f80faea489f3bbc2e14dba93c667" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="f1194e31648aeda463c94fccea58e1e5c3d06c97af6f60e0cd005c9f3e549039" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="1287850bec5e618872841ab171c5e8366427db281e48097ac791d25623543e52" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="aede63f7c26068adc606dd40074e41c3f7074180d5a7acbf66ef639a3bb3e668" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="28c98a8387b8c0722bdb1988494ce70ed1e306216c888d9271a86af03e844e75" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="4c4eac920b9732457b7cf5b249a450146c685cdab4fe2a506c67356252706b65" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="3dd9f86101fe183fc198d95f0e93ee951fe66d5bfb9c3472591ae5b291b36cba" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="547f651d8a5cb8c2d9cd26a32c0a527d80af53445781fa92157629ea8e13f46f" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="cb34a68285f418828501fb7bf4cf9e85d077f66e7290c600fa8fc7c75a5680cf" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="01ec132765eb2bb6a5fedd34a5c1ecc34b26d1bcb06757182d53fd7510e3156d" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="0565caa2a9d5fabdc30c936894fc08be06883e86159e60171e9c860f0736eec5" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="f0dd5af1cc1259d9454b7ecb932c3ac6041da0103b6552ecf1a5ead474d3b5f2" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="5660fc2dd20b42004fb028490844a3f3963230f0e0453b024088ece19f3416ca" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="f8870fb0bb9df1ad5b5a15299f10223cd472a132fdf19467a9755698faffd4e1" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="df9cfa04046cfd8388b04c818023a187668aa67fc7a447521cc24e3596156803" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="a78fe816466a305c7daf291f9b9292067485bf88fd161a7fcb21d803b56fccb1" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="fdf231b479a52da58fd133fa17b06f4a9d2f5ee9073751e9ae9be4564fb3a8d4" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="d2379fefce6484042008880098306075a5453bc12ab447e9409f8e4915831194" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="f49ed9717c288dbb40c37d0620a71ba11f4bde8827ad1e9f5167dbd0bab6e65f" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="254d4cf142335e86cd64e6ef84e17424a516e2528cb9c7542c946d245302b6bd" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="d8ffb7c053faefb50f30d613d2367092d0e04732bc9ed51bdbdd305fd60a3fa7" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="d32ba019f8b5071ad8bebd2684361fa23b9abd43dcc24a7618289ef992224786" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="fbcacc0327e0e215afe057cc4509a71d6e12859fae2d44a5e6ae70526b841ff7" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="ea7c29b957fa45f45673a4c13fe471166adabca854cd92ff2249482bdfd5800f" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="757426a620ceabc6500cc1cf0a1ac5c2278a87c94c5d257fefff331ae29d3c7b" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="ca1360b3bb77d28ce6faa64813e61af8dc4b6ba1bc5a1a142e3f04aa8edd0b19" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="c29a5f40ad51ab728b3e4258d5eeb5290a771314b4dc2b64308c6a2827d6fc4d" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="8118a9487244808a64df3faa9aa4bc96a2c543097175bcf71968bf32b8b23dfb" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="8953cdce884a0c81ce6671e98f92d13db6afd452af1120c3625b9f73962cab9b" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="d90da30fbbdc927e0810511e038348a94f09bc4b9b28d58fb5b0abe90bf3f0e9" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="bc45440cafa1501d28c5eaff83f2ab9bded7fe1bcaf59ee7e50f7dfbb8f42ee1" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="1515b52a4dd4d18d0ba89ae5416c046255cc94a38dc77ca903c3f392e8e5c814" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="3e36d9bd9e8faf68dff9f94600ddc05275433633ebd6c9e533cd1c5be3724695" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="1dfce3059f13a6fc3c3bb37c1d6db333a4bd798176fc5aecf1dcb50e2f2a6032" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="888aac4359f579fc2229c37acd18a252b832b32b3c75c794950355ae7c5135e7" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="d4efc555830b3dfe432d7d1b3b34b9790b5fba0ef9c0dde108a80f2c3f63fd2e" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="cbb7cc9cc04b550855edb010a03f9ec29974c5897ab77e2f53732b3b324792ff" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="9bd845ab0d82027d69f738d7c83796e5a6e4ae039c789fd136e45db818ebf2ae" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="88f8f5fac121e1ee6dff218a33bc3f2a48e16df7692c0792a3de83e8ac5b58ae" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="8db0633f38d078eadf6e22b261c2af9db7349559756e708f41361711b1f4526a" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="b1bfd450bc9d89df09d286cdd31fb5b969572d43dd4558816ec1cbaf91c1ecfb" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="beef34baf48faeeb9e42a687421de226a81c9f36690ec813da7a5ede7c5170f6" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="b812408ccb1a26dfbfd60ae7470f11f62b96b5127c55d2d35eab2722ef6b6ea5" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="6a067722982e4b35b4fd597485d798e6286b02856846a6f4e6f66a68fa9fbb78" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="01c75dab31d9bd5afcbdb3849b6db8b079533d5e96bc61c3ee5e15c5f549f0ea" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="b98841f6326e35360362074f0caf8e5b16ff09c9267793862bc70c6cc3f399d0" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="ec313a579e798071cdc8e972d7adaf4ad168f4298328c860b4116f85085a75b4" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="c416bea27057aeafc30d2f1be114e7c5e558039a5c3adb7d83f795b1a655aa88" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="3420865b8f3e1b70847d29e58749cdc83b261b926a5460c37c0f3f488951ae1e" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="5a6b3ca57d47281ee907f218f61d740751033aa6513e872ddb78ba973f1d171f" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="8a6da7dd0b5dc0dd1bc72fc52920e9dfba21b5a5e9d6bf190862a9a7761438b8" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="76d1d9b2fe381c0e83d6ef814ce011bc6b2794d86dc7d70186e59f4f510bacca" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="8bb71b808b1a384e87d27f4afbd6dcdd6dfafafaac477c79c68335d19dcacae5" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="2008609ecc6f597edf0748384d76b050e89ae47df692180c635ca0d16fa1e7f5" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="d29165596ef5cfa622b561f5caea1f562ab45928ce04dbd9bc9d20032a8ebc8e" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="88ce40c1fa0975392fee56e38736f52200eeaa69e8d52f952d4b62b837476d5b" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="5918785ff3782563d218ebf84e68046ed59c9f5dc43d62438a050185e1934587" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="5cc01a6f0ef43377b67ad3bd6f16cd738771b1c007150572d4f0ceba65c40993" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="2cbfaaae9e22e32cf27d2c90189d05335bf4f23a661ab3be74109a64165cf3f6" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="2ad64bd97db683cfa1d13ed603b998922808231432e4cc2d97f40eeb333e47d1" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="d012cc8c35a0cc9f35b2f295af0c8edf42056ec2c2e2e3227aa5940268f7bac8" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="eabf65f5883cb804da069bf2333c1bcf3ba311be1d527cf37a18555833e35c78" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="fa50c0509d67d8dad3b36c2d1ae75f5f887944d36408b8b74bcbf2f3d7d1d5f3" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="b6955dff3632467a5e004b32efc6f554ccd922254b9feb2d6bb9105894ae0974" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="80decc35c52528c1761020cb75c87787439dfc08cdf5d4c47aaf60dff96735c2" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="7546ce323f158351ed90b4d2a0f8a138752afcada4d63640fdb5e4f7b3731b75" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="2325483fc0f5e945b4ec5ca39582223c51134967470abf6fc2e1b0ff55f1636d" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="45c40f6d7fa32a1e754154e4865002732158d423510b9a7d7e2ae61054655035" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="9da11bd3287adb2cbf3a7509b4a3a21d23286d7ed769867621484d3a84c6fcaf" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="8f507ba53a4af4a86863e439f62b132b0d118902959622c6fbc062079c73dae7" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="40b19b117d3547ffa873f66e1738a343aca69bc762be87ee45a8e64f67b798ce" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="1ec09d8bbbe95df4e98f9659b74fbc33070258d2a59456f8e9c048365af19e49" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="60bc33c41b7462b86567f9d5fb95fcf5958d8557a4be4cdb9f87fc963e6a1910" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="294880c44026c13143564ab399633adc6bad9e6ce244dacf3ce43dc3da0710a9" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="d663fe14ac5cbca38dff392b54eafc60aa81cb0d79c9fd934873785bab339aa8" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="034c98ee5dff1af5f0ac0c1f88e970e7e517f379b7163ca89d9284fef2fcef83" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="0fe1020639b8d7fa79bf80b43c18e91253a73a38477cd0a824cc8969285455d4" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="9a6dafcbf1e401023357dbace62958d7da803865efb8a36f8819f706114896ff" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="11e71b4ae7caed82271afed104707abd8877c0046577e6cd1f629b0ba6035ed2" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="2c60ee68434c410a2de5b525114b812aba3361276407b7bdceaab3a202dce6aa" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="79222aaa245e39b0739a099bfeb4f03414b9e4d091c2db13a4d467f87fa15c79" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="6542a589d4cfbdc29d1140f4e99f26c06042ceaca77e635cf621e5a672228103" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="c56e9191aa2ca85982851be80f795600d12843d88a4f29b9efa03ce0ae206ac0" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="5ddf9624e62969d1c48a8f348396ac07cbb39248fe0414eb78f2ba07bd87fd8f" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="6e866cbd38c464aa87d726e3f5a1d8b300e9870e00e63f860eb10b7b41194f88" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="9ab3bb54d4d047d4f4ce07b3d9b81513aac5ff2f7a3c7b67979d6846bcb80276" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="a83b4b86e95c7e01df37d5a5c6ab413011cee4127c0476feae940b5c224623bb" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="1af72792fa9ee41a93daf622e3a127d13684d8808ccd32316b883858f07ae78a" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="db449cde2e39d4c978eb274d89cc0a35f0577ef5477accb42cbbd73eb33cd6a7" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="66db6ee4619cf4713b473f4f84de7c4682c6c441d683e34c31f6d00476cb9a9d" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="b29f436df5c17c837b9746755c8b0c9713f4afbdc83d22e5741af47685bd0991" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="5a0b5200d2003f5a5b7e96542add56072bad9cc2e4a4bc6905d0a9537c1bdbbc" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="94d05890e2dd960236092afafea9822c9cf2b316410e60db13005b68bc193d34" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="3900b63bdfc8baf7b7866af6bf54e95aea28be7286732853296cde9f0f92557b" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="5fc35f29ffd8d584621a2b8b1a16eaade79e090d6595113ab3736719c84f2300" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="cb81278580f78b1e6c3bd2b56da626e8494e134a4b03ac40f3cf5697755755e8" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="239e53bccd22e228d97a541b333037e6586a39387cc4447dc62425a3f367e43c" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="da5678f72a94e7e34f346134c08cfe324dc8e9129b0ede50a48d2d2f291443b2" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="10bfea3fe7dc5360fa7536b3c62128f55f92d00787c9f92e896b65f6480813fd" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="00e6dce1b0d164a5c111cae025817852faf3f1a833be966844576da8a3683df6" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="42d2b8749f35c2bf20d0258980e3d9a47a14c0394c4e2b11169981d6eaf8c12f" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="5d0c1ebd2dd38e5af3bcef7d535d768438b11f6d62246ded20eeb0152bca7641" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="e0438cba8356c2efd1a4f9a4bf0e2fd0b971ffa8261c9707c567b2608c4da686" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="e75fb07dc181c9197b2286c95efe5cb933994350fd684bd15f8c234fb98f23d5" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="e7bf95588deb6c17b45ec4f77c3844dd635d529dfa2fe42a7e947cb92b02686a" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="8cb83583436860dc068df6798d348323fdff0d022c4e30924738b9e5b3bb3d73" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="fab978b35de1238bcc159cb06c8bf5a890c437e91df3ce768f854358c28e8594" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="3251549cff739f1bcc715921cefa692823e9cc01c8a227264b1cd8b454e0f390" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="e23d53d2b1286e63685af60725aa712179715aef2a7bddda5bcceda77804e0e2" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="6c763f0df0ec45fe9a3abd5fbfc0b46c3ed24bc2742dbc854833f24bb804b71b" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="6b30171406d9269f18d623096237cc6262bcd3b0a0faa40d3238bf59772c0350" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="e9579478877b98f96a5a3defb2879a10f6a2c23a87035677aecf0dc957f58ae4" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="692b69541046cdb365d93b36f1608297c2fa5a05352aac45c20602f422bdd0d1" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="fa15487e46ce272a5c54935ca406972ebfa50de73e2610b20e359646ab0ac06c" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="84ad56e198e27bb1ebeadfdad87210061532767a0d3686caa1acaa3590683d0c" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="603c0bb9af4d2715284e067d6856b357d481f145a34edc646eb47d26048df722" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="7e873125c3fe599c3411c71b8094d074a7e6d81913ee0d0d30cc08b29510766e" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="6dd11f2325b48e23f93897bf74e8528d21c718330341dc47187db4b786a27e0d" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="8fd03155c7796011f63bf532ee4fbb255dabff2843c5584999e399677b0b6751" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="a2eae1512ff23d8e1f7a1ffe431e1cab1f4028317395110c8f3cba588be21154" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="b651b6bfd0d4f9e29d4d6e11164c2aeb5353aaa3405c61aaa630e11885b5c102" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="5d7777eeb6e535a9d5ce14765458999961a9a10c1e8376700e0f50da856a9405" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="053f4d8086af0e758d0de6288f0767eb5ca1aace35533aa5b2b5549e2d626a3d" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="af553e5da1ab06063d02c0d903793fd2068e27ebd9ca0f9c979cbf0aaae6e0fe" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="29d97c9952a548bed26fa65af82416fd99a32fcabc5ff16d6cdd38959d37ded9" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="d19e238a1a7f8d3af8904339eec08ae88b207c4a5587b10677386c95a9a7d558" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="2d3ad710213fe5ff130013fa49262405a368dfd9956888e328e2b7f6b51bdedf" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="ec104f765ea18f392a98d8c9e063ebb4a147675e96101181b6b91d9b50013460" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="31b37d9af5fa062a2e891f34c53977b47381286f8c6031993bfcbf16ec245db0" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="39410d7787de6ce5a6824dcf8a0d9718159bc3f89d1084de71f3b849b8366cdd" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="7ad4f09b320b95db0f6381b2718adaa67bd71fc62a3d34313c9e6662d321eda7" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="c73312a9da90929acda38a57dcc744a47f93ca635fa8eda79da07dd0a0b2ce4f" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="c9ada67e2272a6cf79a4bfabd8f64101dd4f61c0a9d13dd82f575eb8179a31df" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="c6f61005b4675d78b7448daac1c25819fe7d83edac628d2446222b5f1f6092cc" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="d5a05256195b4d7b5a616d223c7c74e4521031482a3d9d53289d3be8281173b2" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="0b852a8d2f9e228ade55715ef4e9c007a5626d0789f3c7bc7295a42b0799ff5b" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="81a582c8a4ea7fef9c9eceb7acce7ea56c981941f80518717d5a745d9527cf5e" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="8294c8a827192665233656f651d208b8aa421f0b98a91fac2fd08ee4560627ff" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="5531e955a6c85ae487ed9d7ac2f375fc3623cabc3bdc419d4139c959f1fcb767" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="bb4cecc6842e1d93042608e0d28f8284d91f10171996be7651910046f6788d70" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="7b865dccc1abc3c4f71ec8a919f41544216bbc0b5a2d93983df6f61b6f10e4c4" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="602d9c1a1a3aae475c4f3ebd8b538804c25eb17e22b07b909c205a4ad7ab4a5d" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="0872b7df392d23671351874445ddddececfa626789619ee88ffc5311958097fc" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="6151e7eb582dd2d6d0e9ef818af3a9857f98850966ef3f9549228e7cc9e090ba" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="3399552f59578196bcb13df4a6fb52f00a27dc7b94264df0afb5e39a4cc267a5" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="dbb0182ba792e0fa99ee0f488c1db8b79b26016691045e436ac2248d7784b307" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="c9ba8f97431c990f05dd4d9802302ef29bad64781346970f36fa5b1f2694e03d" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="edef3603242637382f8f11bf861bdf9869ec357ce4871734c3d9efcee9382d43" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="634a94d66397866cc4423b63a1b9df1cd2ef978562b37c88591110b6b8179bb2" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="7077fe41f59530c6d78e7d2868256660f4cd1a0c47aaf701991cbc14d927c870" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="96f012739b06a137bad7d5e77a1ecd611e65b9e49917a5a9987359cc71a3bdcc" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="7aaa0ab378beead8dfd36f1c3f261832435fd6accdcab1a2d1a70cc120b9b0ce" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="0379c9368cef849f86156e6f3a1e3ec6a0db427e5b36546a2c993b0eb936d158" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="48f2a4e36d29feb9333af417bd4459d8a535b667a4da480b3027b07fe6d7c390" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="3ee69e3d6e7c88d4e6409c289b421e1c0dc7773ccfafbbc0e6d59f5973196bff" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="c102bd317428b85490ecee6ab99d3c4f4becae27ab0de8d0beb4540a5e2107dd" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="95878f4650f8e6c83456487c94448480cdf61c6b84ce9a83b66df1f8cf0b5d0f" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="1c40978b7eebb4fad2cb1f487fef99625c20c05ee613e26b0ee004d2b3b3943a" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="eb470c33b3132a013bbbcabe69349c9f3d756a13e17c8eee08e4268e9360b3ec" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="0bf031143ad2d02503967e50c849e45e4cf2a73aa636ebd3abba7960f624593a" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="84ad923877d4aa33ad73c62cd2a68b8762f1bf4530324e96584c470ec073e5fb" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="bfc4260ce04b5b3f0718646775f044ebcde710b4632d12ecd4022f7ac94cb4f9" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="621f756f9fa5faceca2c09b21aaa21acb1d80769dadd9ce902e0888ee9c72ad2" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="db1875317aea15904b005ce952689a2d5b363a73ca2b2a9694bce70bbf31c783" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="5c8ba297a41adcec737191ac6cf909204467d0586ce7b2ccacb229e6d09bfa7a" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="6d07a7459c7a126012b3134d7e86fa76bf96171e56cc83bf36449fb81cda81b5" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="eb6bf706591e039c92909d2af46dae1fe0c7809265074475d2813be33f317aa6" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="5d7303b144370d4d1e8fc19e8441d43078096156b411d583b42bbed795b3ad4e" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="3319e04fc1d2d1169f8a097908cb46fffac8e2f0c0bc6fa802b0a1b197fb7da8" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="879b88c51675dd1c4741ca9967fc7cf82b7de75f77306d05b422b2b7d568f7f1" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="43d3c557b72a94dca2cb49773728ef643b4f99857e07b1d9fe5b1276eaa9044c" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="275d78288c52c23877a62c137bc78bbf3ca94616d9b2e03a08bbf5f67fdb64f2" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="a2a80c48f0c38e93385bd7faa85ad10c67063648464252c3f48ff4a2b967fecf" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="59b8d9b091d4c525d786ec9f4df17025fb7cc61d575d2227ed059477922ccefc" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="f9a0548b14a743c00fe5aa3d63be853038fbbda77c2d2c6b81f37927d9e74b4e" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="bbce0d49cb1a34164ba2604e7a6694ba5f322c62d462357acb7cdc00edaf9773" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="1c6aefa1e36a39e26b6837c61ede4450436f98d7db5e6ab5e3cb9c6bcc53b649" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="76dac1652bcab596838a45f9703d24b2fc817deddd0885dc79ba0585115a169b" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="31fe515f3c4d6d77b6a7d888d2474647340a9af2b8b9ed696b7f746d78269da5" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="2f0ddb78f04e87b43547c957fccdc71186ccde152235144f68071855823a0692" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="4fc90d5ba2d141c1c2c366f73cc4e7c695d483ad1f227a13db65dbcfd53741d3" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="57fda86d4cc29c10f0d860cd61e0369eea6e4edc251ec555a8bcb2ead3514c66" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="812a13980d1e51a576f02c35feacdc48f58ba2aeba43e2951886961d8ce6cdff" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="e10aabe4460455e6edf69ba9f11c0bdeb79c059dccd234e5b4a81598b00c5517" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="8b8ae31db1656273302ee8bc92eacf4a6281135ea73b735c1e228454036d5686" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="d97a4cd18a8b4db104390732cc9f235edeb04fe0234e5dad0316b957ddb9468b" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="3772a366eba3f793a567ca78b28cdb1563480ba7fc371a6066b42e24fe7f60cc" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="51b9ce5a864620ecca45499f6d4c069663e855de2e74e618fdcbec73230e32c2" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="20aee0667f5572e0904c630aaa5a9d6b96cfdbfc6a405652e2faf41c04cd2320" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="29a30d8b65d5d08306b1e9efc0fc0f4d3b1bf6a82f7cd2d319e49b0e757ac150" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="922fa9f844d333f608479935e2a812a502da905461f4132af3680e89e42f7736" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="61088c31b93ffa4200b7077bfe5bffa3cbe21aa6bde3aab91246fa9ad1069735" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="bcd54bc5c051dadf6ac810b1ab3db4a57b02de631a7f6a345b4243b1d55e2be5" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="b076d792738c3a231cac38b23461022984b03a2288f74994efa0f82dee64fb08" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="3ff182c4316c5615900c6c74a0c7834bb225184fb22fae0844380cdec47636e4" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="1c603c36f6017b96b88f655f365feb80147ad7aa71f2d830a621d1cded016603" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="40c956c1c9bd9ffe11af3c790a65173fef55c032977062ec84ba08c58bd52ff5" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="566687ed2ffe827fbb8d0e88762f9cd8637df59c063a76e03a5a7d881d57d144" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="32f6a9b36ab8f2faae8aed1cf3cb4ae51bd0c7c0e9e5f2011815664aa555512d" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="cb8ee2501f8cc0e226e440679dc3caed313e89ecf13868060c5f13efa88e47f6" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="c3a768c10ea7d496785f97e9002a4818e92ce44f39c13c62798eb7c810caed78" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="5e28a1b46e44d5756db655ed0015713e6bf59aeb493cceb08e7cbb67be722ed5" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="1dd4b6cee83c84038fd1ddf41c0e2b98b863ce8b35316d96840a476f69440220" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="f6015448bb6151806a921e650826083940c9d963af6704eb1c45520d3ad8a876" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="c60721d882d517a50f14fd38a515446422d5cf9e8356a81045289b7035cf7f0a" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="7a8479756061e823d3c9071f9dd2e19cb75a42a24960978c80cefd6dc513b108" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="a84a091fe2186a4cc994401ca0d4bd215098906a0ece55a86bc5d89815c5a565" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="e11dce12cd74e4d48ef1eff775badb2ef14d8781ba2dcf0469e83c4f336e3849" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="e9f2bf624a07e613afb84f07ca795cda4c59068507d66caee36136f5b69af696" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="121d89203c17c57e564aee629706217f0b3b89b0b74ccdf6ad77a932b68e08d0" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="21d4e18f3547105eeb93124d1e9b5ed54fcc5a78269f947cf214f4b2452d4984" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="cb21de06af29a67a5e6d090bb8f3c868c3dcd2e37022325bbe529faf44a77af9" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="aa9580e893ac2b55960255a4dc3182295d6c2e19489f08dd029c77020d2c1c28" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="a053dc2bc9be874281305cb447037f903f3b9911a1241235d1dd608348ebab20" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="97ca54ae0f77fb11b28369f4ea52a2c501a281b4f37eec5265ec4e9da2310322" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="f52bbc318e3ccd06c8cc5542bc6bc825103ce5e9adeb7c4bdb59ed5b9c53e017" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="4032013ea0d062fd42f602bc068da69e068c605ca4cf38b758497c1eb5bbbe8c" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="eda6ffabcd3026f799263c9ae4abe5b6da9f5b257d9cffb1c104ca095e9901f2" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="31ec6aca6ccfbdb9d84b50f8b53e930ea168a95c750871e5636924ba9d7ec86e" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="7d302fad3c4d3a7f4c1b596fde9dff728966ebac29342be350f4a6e90ad9ba62" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="150671596c43f66b9cf880d1c3bca8a10dc24de4a3c671393a4b2632e4bf290d" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="60dd2a3e767bc7839421eabe9cc9590de146a000d0a367c85c7c6a1570fa350c" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="442ebe06a44d818aaee27603337111075cb3090ff1b9cb588fe960542db8747e" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="c87eeed28c5869d4a4f1ca6c2dfd704bedf18b5649c5675a04dff0e843172ced" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="67f9691e6459233ebed76975f1050c2576dcba9a5cf795eda7e3cb746843e15c" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="25c25e9994b8b4e9b607d7bf759ca69c9e92d7d8c64dca5c958243555495c323" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="6acf0668110757ba77b67f2baa639ffce1405d49fff3862ea095ed39de607dae" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="0863ab0f6964099f6e564cec5736e3d2b4d0461ea62481405f7694b42a20b40e" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="2016c0c230d8bfca3961e8443629e34fcce4fa8655f57a39b71c7935902f6a5a" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="469d5cf11e6e276a99296192307927502e0f577dee7e82f68b8e11486b0cb16c" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="a35af4b2853177cade83b6c36b998d721e7174283f5d9a818b5a859a1bc1dc5d" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="4a6b7b2c8d8aef057fbeb5181ba237e0dd0d667649e8eaebcb41e4a681128108" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="8704a7a2d533e4d4d1f1cf7339dbc07f5662e801a32b8c36562a15b2e529b8f7" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="667f96878b58457a46a998ed7b5015761fa44b5a6ceb74930eeb466af1467bee" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="f3a4568370c4ead342d8b027b79ad150184ea9da6dd1c781f873484324098531" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="36062c1904d9a2f44428401f722c938eaf87630bed82046191f4a87d597c0883" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="01760702a0344ecc9ae2b0fde41e3ae73cc7851e81aeabb0b2c9cbba602ea26c" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="09ae30698493a0a2d5935603d49cb9549ab44f62d312a64c63a25485ee2344bf" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="3fd3df30d72ffd721259913ff42349df34fcd17e1544cf640628ce1cc5216dde" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="41030f7f888fde8a9cb2cd1954ccc90f3e4698e02a9fcaffa003e08e9102455d" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="5fc07b7bc714c983eb0bade90ac699885be3bb50f9cdd2b1155b768bdf4716e0" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="a16b30e735bf6d0fc3c21c03f7fa304f0c007de6f9a70f95a315f16af5c4e144" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="e20ba6f9cd5257bafe1d3d3e92caac82f6e2d632b1b2f1a72553c35f455630e7" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="291588cf872a6dfb9f1ad8996f3b2d4d6918a1a120c96b8bd2f94b96ea0ca7df" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="3ec4589603017d2ae4021b494edb029aee1c1e135c94a7b13cd86fb5095adf5e" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="8fc5f84675205874a7ad479cbef71de0484d5a346b8de3619444780ff22a7d19" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="31688ea552c25437a3a1a348e4f607f55a1ec9577e7217596d3f40c7c616f912" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="8ef48e5db67495d043476779288b1a49664b2ab4794a2a674b3510d42ccd31d1" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="8fa5ebd92f9a8eea9415d726d62e61d8657e8c7f67f9f9c6c7fb09e541106086" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="5a19be330e4c8c3f5c2d2dee287469a2bde7d034795833e1c5a1b6350425f423" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="59626659edd8f92d013f3653855bb7adb64e2fc33030e14bf6163e19ec82e987" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="9bffc886cbd83474188e6fd93c4f78f60bac0321823317189582b4539f067efd" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="165a8109f5b109292f376638aff62ddf0d7ccc697b5eb62a0c4e07af8fc885d6" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="f354792022b6ad6efbb78b83aa72994ee68880efc9ee4e7efa57f7e6816c7c2f" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="d139bbb4100cbccb0aae1956048b18378786084420715b4717cb2bb50080c19a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="04131a734324003cf20a083f5648ea89666ee99f403a69f8ac60c5730941b679" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="a4fc72fccd420f431cc00385e07bde92f6263a094683d488aefc3746d5dd98d8" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="d937eb074780003e797d0b7c281b75674dcff3e8371c5a817c12f9c0129e0660" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="0ed6a107505e5591f1bdec4f29c90fc9438c82c05d6ce972dde151dccff8a059" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="8a04c13513d09b154bdfe6cdf2e3c894e25f692c07387a6e7ced30e79596cc94" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="93bec6d0221375febad49b9771e7fc6d782f70610b77237686711e0b5170564a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="985b42bbaef92e30fa55b992b277e074c85e4c7a3807e412fc110bad49e1ba63" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="0e52c1ae839e6b8524974948687425945786888b9835158e9ee5c68e191eae98" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="34632b836a1b1660366e765721380334f8af8a9ac4ad5177271a192746594eae" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="de9974dd7ce81781b18d1be1d849ca9136c160915c595312845f39ab772c48f1" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="2342544f0e95b4a01e8e52ec8e88cde46f4760a2ba7de2ef01a47ff620fa560b" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="c72ea0413ebca5c78ccb4de7d1a9754ef3a15087ccb46cbcfcfde89082c7a362" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="a984d0a4a48bbef696621b8bed699457c9a9cc06ba13f7c75a617f4cb885a5bf" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="57e75f8c8cad372e1a81cfe0bc45a078802b600ceb2f2f078d1a1d608d978ba2" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="bfa2d4bf277f1342b9ab0c1ed1dff16f271e1261dced99b5fedd55862e95f4f1" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="3af1537d6aeae7dcb0fcb146d2beaef073596d4ba6798c43cf9d49aebc52e2bc" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="e93e1b455e78068f70a0d31f9db6c60620873432e21d1d24970e6feb3fcef6e0" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="b9b25993bd1acb75879c635372edc016a415dd878607357130be76e2410e891f" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="ca2dc321996e0a7a75ccd08e579c677ceaec59e32bae6bf280152ceff2fc625a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="37d72d3957ca91e9034348bc8cfb18010dcda41ec512a37ed56b2bc56d76a1c6" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="305a02904f9902c702b4cd568cda3cebabb2f1fdc0fdb151eafc6a09ccad8b3c" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="709f7f1b5fb3dd7bc6d61fdd6549392737c116854d540807c3951a266e472ad2" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="ebc24fe078a607bdfbccb23de29eea6b43aba317b932655554bee2af6fc3e77f" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="68a35c093dc8d5dfc1a10791b4bb368d59dc59410e14cca8864b9e83e67f1b60" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="cd7f66f2dc4747e799b5a0eae92449bef673bb826f4e3387852e09a4d3ba6d7b" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="24e8db2b1ec09938e7e8f7568eb4741bd98028b17eb0744c0bc0543698dedd93" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="0a14b233ad75b752c7da38ace348b86472e9e1c6ede84a3451fb35b3a7a032c8" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="66629c9e218f2282fd2b97da570756f4457630046a53be1e6d447790d04c1652" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="dcf1695547011416cfe107865674af2c32caf6a9f650cefc83f8a3f127bca94d" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="23d0a622cd5ac599427317e9769c42f2a5b6f79b485932f317bcc5d4fc0ac966" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="e903856994ffd2029f23fa45e91ebdfa21e1dbdd6a7343e97d22a3aaf97812a2" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="3e6cfd45e0ad248e6c4f3554bafcc7444e58b9fa219bf6aa479118b40a7233af" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="00c0c23247d4ed94e47752c011f0d7674440201a9d2e9733d54229cb367d7bc3" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="be2813dafafba9e2509b0d3cfdf9bcf53779a2ce8e2a1114bbd963e4c32b240d" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="cf32c6a32390586d77c81238f6ed6bf961fd1bc91ce7bbe6aa5e2fe195353c82" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="659022151380d1b55612b0de9cedb7b962027977cf1df3450d81d198545592dc" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="f4417ec6138a9b9585253fe858edcc186d58cc5c5fa16bb7efb85b53ccd4a52e" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="5404351f2802be82c8e3d6eee3858dec76a4d2fbde131b4918d66e35653ad217" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="f14b423d942bc18f1f1eae7bf22da7124769280e272cb7106508e49ece8b5884" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="f7e715c21ad9f869ccf066222047fd575d1a215504725b3812b42f80c3f1c22e" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="e566ae7a770a67a0818ae5b6359ce28c4867529897d476fbd1ff6021bc787df6" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="f3dbfc53d50070e1e9df3debf8a0191e4396b3b2c6a42a0b10b34e194fd3fe70" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="82fb416ed511f19799bffbaee0b53fb6ee154916ae09cfa872c7273b06c9b568" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="dcd65b653bb124cf1a8174388db57bfaeb7983dc7427086dcb79879adad67ca5" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="ea6e285b37fe3fb238e3eeb4cd42cb35df9858732fd190f04744e2ab56ad73e6" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="cfe3a53272ed124092294a70abebd9eef34fdee199d1dc48e0eb3dfb035b18f6" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="e8c8982381619e05848b39c32a7996101db84167fcf98986e1aa0064a7326b59" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="ed7152a3f9db37e40e238c864893f68604c251938fcafab8ec90041d34bbaf42" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="9c69b261781b0c6971b6fe70ca24e8ac7d416e9cbc2add6c1ede72928065017b" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="db59c0a0346a1cf740bae8094232b6823885d7bedf6596f686e706caa9591b93" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="d86be430cd095dcd22ad1a70c88c089d4a4244c1ea5661c3c982df8f9b765070" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="505eccf8d41a59e1bc1ae672c0006b8fcd0a33c3e39f2500c148930f299d8eeb" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="e9f7dc860e9cc71014842899bc2d797c8db674709051a6b4e3906273de78daea" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="08d751e24c5044d5da2a42eb7719c3db7e4f5be82fc4daf7886aff817efab1a5" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="e7912b73c7551300cccd71e21d1ee6b127b95a3ea9a935cb27608e08fd1a3943" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="c6ca7de0d6264aa636a14eff8a67404387ba8ed6bbd5cca02984c78f0138cb28" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="15e4bfc043504e585d029786214722e86176b65c61845d1a5f337d109d9424f1" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="d74f3c8d45a989dabfaf125d9960ab31b528ee74db1a737ea34f35e8787b7d48" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="b1407c3bf077ada3c2334125021f4e6e1971ebc13616e375ad6f9b306f455f9b" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="064abcb84bf256415536baba5bc1e58239c2afb977397eaebd0d0683a7d62390" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="4be5f1a83d3640320b0f5d53b7a591bf2656e4426a4e11e986674238ddcc03a0" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="95c9a0d37513dcc09afbaaa99806dd8aa8862128ea53478b78bec3dbe61e81a5" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="e617a9831d1597b1d7f3c33e8f0edc05fe620796fbe5e52856fdf5944daad01d" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="f6999a25f3ea35123019ea034f72eab75def93e6dd7a23df35d688b61ffe46c6" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="57169677440af602d478cb878e7ae0c7c45d9af22013da84caefd860bd61b6c2" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="b95adaa5d071b597dbd7e0e44071f2706dc1133c77c0d4932e7fa960a479d9f3" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="412dc11f4ddac8cab4e4c235c63f15e90ce09a1bc9075a479ef298a9a3d25e27" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="c8dc7ae66ad08f8cb348cc3a90e44c114afce5c5b371ec8e9b0e1abb9f988168" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="808320bf40b4c5c74dc52d36447c45799bf44572537b44cafad9ac51960c7b88" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="6528eecf76c4282953512dad2810596cecddcbcbd2f71ec17e4c44a50751e6b8" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="ffa2f48c7a8c211af0aaa53fba55042a728bd67bb1ea219e776f42cc56a1c7ab" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="b9d25a22cf5ec59ce57caa0b69797fa2590cc1f2ed2cc2eb9b379b7bfb61482d" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="91c429013e7e7e90dec91f057ed0fb25b8a28ae555c2338dbbfb7be0cc8cb178" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="51f082a73dbb5c39aacef547123e4be08b976cabc5cc6279ca78b6637264cef0" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="cf5ccbf0b63f5c97ebb85f742233126d657f458af334d8b40a5503541917b37a" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="2736df04469692d78ae85618a44591b4d77cab543e93ee9f422ec1b93cfb7f2d" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="450a82d53d9f4dc5a27157b87140a9af22e9b786ff8044ab903ab543df2e86bd" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="709b39a55072c01abafdd88e26f306b60cb8b3200e16a4e2300143ea4ac25101" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="7c96d46c9b92dd149dafa7244c5ea2e8fb11fb76d93eacade9e394944606ad52" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="790facbfa288da7b3d3dd7fb3d6bb19c81ff0aede978b972177b9a0064227894" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="eda3a33cd9c75172e4b6560466bd75dfd9a24500886e8a355e03032c3e78dde8" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="1dcc304ce8dc739c15eaafe0e6dd360cc35e676226ac08489d8dba6a372423bf" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="23520cc8908771ed601472cc3ff5596998dde3026179605cbb337fd468003745" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="41b28de4a1aa6b16bbd3a3d6b2f474b1c6aed07b289fc5a26170b4aaa8b3f23f" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="b19eb723b98cb224d36fd62798e6384e267640443d9024b7758784bd613664b0" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="92fe082c8dc340acdf18f75958cb5ae6cb2757ac7499433b214c777c43de73d9" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="4d4ccb8eb077ba96f70e4a0942f285664baaf5542d32f86684b6f07aa291fe48" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="a692e9e50aa372f302d8de798893290ee6c8962f0d0a4c6f36809271a729340b" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="90672169187bd1f344ff6ee65e4285a0d10cb87fb6eeeb5a09e4de22f12deb93" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="a71dd137afe031e53568dfa62c571f2cdc0677de9ebc0249a06cec30ab119ce6" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="347a922a12884410f5f28a2674e27467afafa9b77aca293d02e392df85fc6fa0" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="2e5c7d913d7f4d5fe629481e1a8c8c23d444b76872a482912f9c769bca9f2bbd" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="c2212bb1a4e6fe046c09d44adc7b6cdc35a2af28fbb28428571f2ea1a72ffc93" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="f432123c5a8b314a014ce28979288a6f5edc27a412633f459fd4064317e26584" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="1d9f3fbba37489d4fa7a9d1bbe1bd024efee42f7a8ce6e385f2fe0bc0dcdae9b" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="a7eee616d0e8e4c3bae43bbef407f74d08661bbe510a61e53b3176ef24a42821" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="55c94d5c14b9656da4fce0aa7556679410e1f058405309e7b606bc410b8e0118" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="4106a8b91fea89e25acee1a7c8534c73dc81dde5d25bac3b8bebbea757f44e42" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="644ac3d8b8d5090d5080779d51100bce576deca26a3882f7dc4db17450b07b8e" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="879eedaf0d596ce40d7d38b4b7ee2a256b44a8eb240e7c7a7a320ef5ae3d5d9e" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="e83b28608d38fc7f215d243edc30951b1a7201d1c7e5ea2d18129430fa8db260" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="75cb6c7beae3106b00ff5991da664b3eb806be99b824f39227ac7e24e04e952b" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="8dc0334d15d789ee90206b80010697767543ba3106a7f63f5dd26ba06a063224" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="2d38f1532e5af4fb0afd7e7790d86391c6e81c360b920ead94db9fbc8c1c4f47" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="f2f7f3a9ee13c2512e3732b10550c5aa1b102b7344542557f4022583dec4e2b7" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="cfacea23674e82719d0071695e137108953ec2493f74fa98f11e2ff1cdf35648" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="1cf2fc32b66e45206d711372ac4d3c61d681f3a31954127c3226673371a5c22a" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="83b24fd17e936b6fb94720ae191768011b9c82bc8db75e183c166c3516e7a1f9" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="14cb5a63b3a0e0c01ace0de56e67f9b3a1322d1a866a474d44f317324e43f863" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="cc996aff01f7e85094fbf3c64569783243ca5bf73a5771058343c5684ce0b923" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="b5de81613d51c1223bd1f674404af0d2f0ec8937ebb8bd45bfdf7c36f36d4394" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="62c22c9add4ed22009787f72d5de074a6cdd9b76918058f5c97e9ce93b49a0ee" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="5ec5a64d688535d72ceaa93a766e1cc824bd6336a4dbbc4d8c63472e21363309" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="ffc8120b48eb5ec5b62b46f0950cafbb319241146b5a0c749bc7367da908d048" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="b8091e2fb93bc72e8e280c3bd6c95e5d11b74c93b210555113c0973ba66e3c32" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="86ce65c9d955e984797bc7dae38344c3bc91a5df725b87a28531432d9f486ff0" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="cd0c8d915abe404818ac3feaf27f90d816621d9b2117e7a07bb15ed2b0bfa1b7" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="8da07c5ff624dfeb0a9d92ddf35240bd8030ad9296f7e99e3142730c3989f122" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="910af10c900358e6d9b517548433fa0e3132c681215d0c0c346fd09877627dd8" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="748cb75c8ca912654b1887f878a441edc2cbbecbdadeb0befb99e68fb49114de" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="7fb51ff4a0b865a6b51fb6c14bc73858332e16fb09da141cc4ce7932fbb32078" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="d077003f0d5a4ffd15a059a672ddf78c39af0e6f82b8c20940bbaac52d10fe6f" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="2ae24f1795bb94da1fa958a0f8e17b3c2f942af320bd9712d27b30c3ad58eaf2" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="54be7d6d5c9198a40d3ceadce796a45877b847dc73b1e7b623cbd4289b310955" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="306e36cb5bb4efa6322fab2f9cd8011608789f2baabe7777b72cf0c2f0bbf5a7" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="a8dbbcc7a5d6af2a66c5abd2f3b854ae1375412669f5415c2d5b7c6a1da8b929" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="d38803afc2fde451fc1f8b8e3fa96e36895501c1ed2d1ed0a676237cc81a650f" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="706fe8095709d4bb1ef4285dbe17447cd767fce4ddf25f1480a409953489cc03" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="60b059e56564a2bb4bf2412b4c392eb081e7ffd0ed6384b68f54f6a120cc75cb" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="93ee381efc13d7251fe9ab6573530c3757288948f7957a9f4561b05e57b05f72" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="75c32721a549cf37770f67abd0828299e2675e2159fa6ee0d0ac4f78ae7ca29a" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="73ebf6fe282db90d418f5d193da3b75c70caeb5800eb984d6d6e7839c1b46770" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="99c2589d693e32cba4a4d39fc5fd15d1bc25ef539884accd84369185e31cd12c" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="376e05e62e9b595e1b42cb259c3197406b415112d641a7380f151c95ccfdb314" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="83c712bc5b3892155a45a67b073f5b3aa89ed8755ce2c7d0306121b57f55fb1f" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="7f524e3c46728f43f2378f466e501e0e4e6d4a1a9709d22ff9882c04ce7c28d3" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="d365e0c6992923a82cd5621a701f171528af0aa13390c34a6f00b0d2b018fff4" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="253e9eb9ea5fb469a88a43602c8ddb2b9bbd4b72c9a2783854b154415ebd635e" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="e44573218de03c9b190e7dc0a1bfe6cbaaf7e20f556712a834018d219a84d279" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="84ee0e4025af0cc56e2992076ac00f19dc0aca35f0b7102fb8c649987444066f" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="4dd1217337aa178ff84d6a7ddf5723d3019a54ad9c4bec61cbde9edba131c7a1" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="9e034c173287a74ce15d751aa0b455fc746d8fcab6e2755a00f379061cef4f00" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="a55788e2886941714bb049c57e23b08e25b219215fb603199518d68795beff49" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="d3727bded697834d8eed443e70a2f5326596169f5fbd4057028d3c2808798bc2" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="9d45edd973df635328f212ef87db8f153be77148cc12b663a31ea1b403928baf" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="d9e0366b32fb1e59f7c23239df020e01eb4c835f7ec7ae39fc2c35664078356f" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="256d95b95321c7fe9014ff5cbae4e4dbfa48f4106c004c62e98a74b1b8f8a1dc" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="9ed48579bbfdc0c02bfdb532193a8473812c6f7cd5265984200409407a1994f4" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="74a70e3c626eb6d02ddda1370bc1ca4ba91165063a1bd66c02a5d63e3fe69157" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="fa201d12caeee748fb35d206ed5c3551fa8ab1bb475c76b1306b73d410d1f8d1" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="5b5dbf475c890cd28e54237f5933b5adca60efcca04ed38e6a2374dc30ab7d97" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="e3b2eb82336217b150355313ff93b586b37470adc8f16beee0e1cd731316e150" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="569213024a61b5849ddf355ae7ea5f899fd99775b56f696ab59ec4fa18300e5b" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="f037612841b74b7b14b9be9068378ff3945f38c0d1b87fd355d144448ea3483f" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="78775f6768a61c24534df9b3bd702bb77c0b035a9f912849a1fb41db6dc9cc08" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="2eda2b074c53ae31b3e2a438ebbdca3de119ef78e6ca1085eb2521d12851092b" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="e5e52b19d083bf2a6ee9deac05a214a82880bb1ed73b4b01fde7eebfe7e7e147" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="f0e0c00f7cea8a0b99571f09a883c2543f5d202ffad6e44d8c2f45a0246aeb93" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="2a9b2f82d0559f53a7a5244757f032225c32580340bf3e82e023e7d7ff2b471c" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="53713f70cffbf8df414542f7286ae482833bd3964726b6f7e0b55f5ac82c6b82" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="c0b6a3929cd9a7dfb7d63bd9a7aef78cf614c538b52eee85d1af318891d37fab" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="59c3d3d53ed302a91c27b9f412e1e197262bfa6078b3006152468f1605eb55d2" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="2fcb8c1320618fee15692d14b13ed13692122314deb8a772fc9dffffbb24e22e" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="9c82d19f83252266c429b9696a7e8103aa562d78a1adf275bbe719c2b963a16a" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="cd955e69e2921e9d1ed0f5a9e9e936b62590272e56f56c8b8f2a8c6176c0d765" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="e779dd8a5a2aaf4b6c2fee982f5d574b2043c01c06cefb59625be21b59ae025d" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="b77bf961b99de2d2c437e84f6488134c5b3a8eaad5d4260637621ac14eddc8ae" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="cc1435aba7bf70c3db5d667745192cab2a0ab71ff495338b2f7eaf12529e3c2a" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="4bb31913e98c19d6a183a088ebc4907458e3d80f4fc85bf9e7f3770358d6cf8d" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="64331ae2c4e43fa5662f57c5eb57b6fb128cf78934236a96993ca52ba63096c2" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="01fce15131671a1a9244b3cbcf5f68183cf1e2995f6e424c97e3ca43b3b4f3be" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="ec5224dbd9f55ae4a6bc92c2233048608a51eb4ad1cefe9adc6b8f84b8316719" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="1bc3e699dc3966d65273a6cf60cac88c39755e8d59ab4eb6b60f51dbcb733a46" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="d8bdc70565caa3d7487c60efaacd1fdd0366b5c249bc30acbfeb23fc99e44447" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="e29a74ddf398d23bc14c1e2ba675a5efde11949c157c5ecf21d11601844be257" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="d07e206996b42cf2b259df7cbd4c1e833f1592496c0f091f8afbdbafb864569d" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="72a7e71896c822fcb15df33d3ac5554b4f34f7afa75397d904ff811612b35a3a" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="e08fa99bd6fd7b69e69a577c5f68d262703e55cd19889098fc917958542097a3" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="ce5fd035a131381f4e96a6607b5e9174e9b628b581c06ac21ea1a041c5727ef9" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="18cbd28baa71763f7609a5bf871b1d80c1dea69e1831ee2d57db8e4d9714977b" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="19d8ebd59a82c36e118faad64a7d42559e2ca804b3d7b81a9583443cdf4dddf5" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="cec8c19dfc531445d7472e1c23afc1e50bc000cebc47d2978c4ae8f4a5e8d4ed" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="565a8a1473ce32b2af7fde6235b4081d41a69942a675d071d6ba6973c7f425a3" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="5cd2f422dbf9bf71ebb3420bc5262ffafd120780610cc4a2afa06afab3487030" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="1273b5099867b55ced2b4c852c8dc5d2a81e86361a5bb2bf92310bfda8e55d4d" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="7a28a12dc28e05c47761037c7af23f5604e51372d8d0b38f11ed6580f710b6da" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="e1e023c5887521c7a44f9fcedf288777428d579b6f4d02e3735a64b47e0af768" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="e0560776b12d8005e6e488f9e8ac14e4a0e6b92b482c0afc3432c4cd685018e8" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="6b0ae4941c3152e4a6cb0492f44054996e2ad60d2c6befba551f13f07d36d544" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="e5c0f255f19c8b4bcee23f129b8f87af92104878d83add6c903e8eabefd2ec5d" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="df31b93ecf0a494881d5cc0889d1b8eb4ac5967803f332a1d55af6acad3df976" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="9eb69cbc84c8bab30055c56ba8ce561e1022315b1b27d27dfc317817a6717790" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="b2280cbf8e941b422b9a115ac735f8e77957e3c3279802f2a6954e4691b4a403" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="4116207d7fd0570d281948178ddb10bba229e277d391c8fc17e93dbce2b86971" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="355d0fd91d63ef4d517e24bf4aa3d09d8a4f2ce9c48f697a289192088cf96538" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="2e174456752dfbdb073de23b5b516f24bb4094fd0566d25e96dbcef8d3e8e13f" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="6666fc39cc7d181c211c4f3b20538f49debf88b72075a8a91e38544a657f340b" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="c49d70ad5433f067f729705a10a6930444b991b69a0cae6e09f022138c290b3b" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="b0bb98a1336b6cd35e34c5e091d859d1816e71f74768d62057b58d567a338ce2" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="a641b94316088887ce160b77ea1c0334481b61e808ff45e5d0fcf507b88c9bd2" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="fbd537b96d1de154899fdd0bd7350e5c98666c4f15e59faa5b78e4742f2b08a4" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="c03853bcabc703199462baeccee50f1ae94e9381bc7e64cbf4ddb1450f2f7b66" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="f8e8ed5b41e9db016f666e735e8cb7328d00fd97143fcab088d5dbdc14649f5e" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="fa9e82ec1207e09ab0c6e0ad5049571df4d973bf0049d1a9276ad7ee60f3d8c4" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="e703dbcf144a6978acfdcbbb7d51991e55cad645ae80f4767e42f4ea1dac4845" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="62fb21d8ebbccfd9c65d5f4fa155d0c0d9bc820ffcf3f7933f7a0ab3d73bb45c" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="93397ca6ee379b975caf33a486d9845e6a69bfbdd1ea993f74dfb163a321a6f8" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="a73abe52c02510c07cee0395a8768c489f44f2a613ea30e938f77742c2f94c33" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="e553ab48a2368a788bd533208bfeb85464cfc776e4ec1cbb492b786e43a57afe" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="a0ce125e79afe2f740f7d7f609a802a39eee743a02163e7595b47ea1d40221a9" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="bd8a471f90c6ea4d293392f97d394742d31bda06b53d2dd38be1b6bc8d1fc968" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="9c62ec88386f2e654a3de160c8eaf4bf9ca794569b92e313f2d4dd80117f82ad" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="02c989d135479785ac2169bbb69267207809c270623c1faf047d943869b20157" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="c0f3af8f7c4f9624839ffce68cf94893e40f514ee7a91ea4c037519d7f44647d" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="26fb8a5f2ccf9175eac74527764503659faaa7df11a14ac8d7eb0d8898b1f3a4" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="52055c06c3abc4a8acd6c2975b92b8e190a2b9983058b3ae66746dbe2ced8ec1" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="d8bfb66ec00ecd2f09ab62736f5d886b182a18de7510244e5328601c2d06f505" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="e9b78d10c2d2cb7d5404005bd81a5f9044b90b0aa632ee5a6866a17cb46c021a" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="1f1ee9e5120018b7ebf2b2aa11ec51f3e8a632bc1a2ad9a48abd7a9835bc3e64" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="e8a07e15f07c335b2192fa76d426351dbf98a8591e838ec30b8b044dbd5f432e" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="cb42a42c9a21692d45a01f6b236460c32cb9b88bfa1ca9d39242d14a094337e9" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="4108ff5c6ebe897db77af8f789e79365584ce3f23593d117c7b2293da4a6c0bd" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="53e8edb2c0f7e87cf368c5cb6962c6f205d7953547eec53b80dbdac9ed7166d9" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="bf22807eefa1a2a4e1aaf5664b46165e5b6eb454ced4db82c11491e93cb12d71" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="bd80605da2200123fac86b47c46e3b38126c2705e0c4ea6456e4e58f6fc1f0e9" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="5d65e42b838f0c2145cbfd625ab5470f9388a6274a2cd6e7ce355c8814977684" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="d77d8c8d51e6045a525f1963312165cf39099e4a4a332cb40eb047fc1e086880" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="b750a05941ab79e0f58fa6995096b05a0511ff33df34a75413343b47b3f79ab5" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="1d611f9e9b94e50ab941d4b4330cc61931b348857308e87f5a412aa09cfebab6" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="6e011757cc69d00389da91baedccd25bcb19e085b150e65a3102b00a0c45bcba" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="8ea7a6730c07d98901629fc1f2d3a86ba96bc2e24c561bd1c92092d6616dbc78" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="f770ec4dd8f2b30528642813feebd61b5fcb0b14ca20a085a04bf300c79db52a" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="d792232ff2be141d96168a2f413d8b750d4e23b5ea7350a39cf3d667090be9d6" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="41d766f5541ef2e6f72db03aa3d0202b5effc2e862300fcd4481f2a446161ecc" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="55dba0972312a248e34e5214a39dba2e95ae39c941e939a2091ff5d2475061c3" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="279d71bcfe59959ea4c0452fa8a16f0ae288beca8312c101a785793373ebf4a4" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="dcfa98f5f192c2309e9e481e6b32c25716b85ad1f441e05e9fa714c21e11ddda" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="bc6ad6870b343b96a196948f8b4b2417a802e78757303423ac6d64f07f82a195" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="a069f8e79e8908f17693f70dcab7177fa5eecf90423471f5059f8ef89a10e8f8" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="45371a5182d2d68697a115c650cfc895c91bc175024662e6173ba8481f2e7af2" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="ea9071ad779b7c70df319b9c596db5353df914926e8cf58a614670c4e7076709" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="d4021d287350c1548d1f93e4a8b31d52ad2e047092f2b2a791cb1838a84be012" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="9e8d6a857b8a45e4ddc82c22e699827a7389010df0157c4052a9e4a3ec7a22fa" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="4ad7ba65d5d1b520c94a26248cbd1fc03ca584b17d4f3fcf32747a28c6a8d7d4" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="0106e202c5c59299c49d5cc02b5943c4ec022bf6f8112bad2bdb4ea9468b7775" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="202f31c1b270e00916f78226b67569ce94db2a1a3435182b1d641582ed938b23" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="4ff33e8f22eff0fba7a0eda8b09300f8531a7c20b3de4022f79661265a4b1e55" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="eb45c7157a6245df81d37543a3bb0df91d2de157b75de54b069718dbd6b80c47" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="b28d34d76b0c2b83450334ebbf7088a116a7694fd074c592d6eecdfd25646f87" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="d18f00ac4db8d0303da849d25eb1d1d19ee75f4c239fceec3cc3e465b2b68ac9" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="2e8293b93ef3e42cf10dc6bc49413fccad467c748d9be429b56f860d67913031" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="9c9163e1c88f9ffa4e25a9594639f572b48c165139a62d6a4b498547ebc1ab1c" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="ebd8b59a1ba7367d37efbbbe6b3db87eff703abb38b2be5ed08c4f11a1791496" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="d9874d742289bd35f8da2334ff026c42615d26c4ea61a0e30e5b16c1cc484f99" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="ece59651fcf7df6b8cf0e1e521ac33f0cc2fb14154008dd5299a250a22f4bc08" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="cbf1eff536ca64fb65a01624c9b8dd5f82cd3d97619e7f46ebe778d73dd19681" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="4fac3a288a39739ea26d41feb4a714c408fbdc6c62a3af4ee478780e9bdeb890" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="9318d788f7a82bc2967f6ebe1e2f34ad613d6907f44674f880d4a2f83bbdc109" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="7242b76d9d85e2d64df6b0c8ade887054cd2bd5093d0aa96ed618716af6c1193" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="1514f64f93ad41822a3dd9fd921bef4bd727ee9f71521c102a6a75f1f1352680" name="java-11-openjdk" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="53e398eae52197797875b23c439c2823590512db7cd1b1da321c50c880d4bcac" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="496a324b4ba563be0896feb4fc85a8ea8c9f910d9912f0209d312117a4767856" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="017d5ee052810672d5988b0b940f9fb9852b91077bc2efdce053a693018db658" name="java-11-openjdk" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="128da2f6cc8b4278b95e84bc40e6a75e9a67414a881414bf5962cafc623b5ca6" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="be19ac1674b3f0f60fd3658952a334985117c9c66ed86688e5e39e3cad20aed8" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="372024b9e4025494ee7079e2a303f1ed4de475f0cc7ca23227cb372793d6ee84" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="c781c003a148b702ca79b6b9c40d1b7f78dd075b92bb94a636464c6d403e807c" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="7f246eab4aa1848d36d271b7cfe95b0ae14c71e7e89db7dd199197ea1385c077" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="107491135794746f82e373bf742597ff9e43664a16d152dbe6025b07ea7a9ca7" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="5af69f2450caa5bc4e1b305ec8bb1dce3b545481cabcb074d4f9d82c00bc87b5" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="f1ac4ead7d6f74f4ee29704826f86d30786d9bb25e79915aa0c12ebcd0996394" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="fcff49a6375ccd0f833bd51f2263b5eb9cb768c6e882031244c136d8a8dae0b2" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="9a3bb5bef27628e82248ef585d0e672e82e85b575dad7e52da3cdc5d8f2650d2" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="d9e3cf19c7f80a466ba5dfe8c2eb2e5b457d4dc3a15cbb275e585fbda37e4655" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="6c8ee0c663762c9ab5cc5090362c944b810f9462e49bf544d1638b9ae6bb609a" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="eca78025dede567ceb966754cf95acc0ff89fd0c6b8bf7ea917ac58238f7c32b" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="c9aa416b8af9998ff6721eef855be58dfded91efba993d5067da52b820b9c677" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="ad761ea43bcc406c1a5958af5a72ad74d7f0137fe60fab6b9b18aee1ef6239a7" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="9f373e3c294909d6001c3d56638d9df38efba9982c35cd8e36c69677a993a1c9" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="42c4a63570c07e841025072f6aa29f5ae61c4f84341222ad0b2292649390677c" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="d567a9eb4aca502346a60a765ee5af42074d1340dda6669085517e46c1b9a0ae" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="32ec4cdef66f474c7f12974e9ad18ebbffab427987d4da38f8f11bd539084a25" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="a71b3319348ae05a27f89d134b40c042913c10149426bc44e4f55eee9f252185" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="08fc8586f6006b2d3d6ca7d1c2667f282fa90678aaa884353611a62c41520d21" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="e111cb3be613220951001ffcebf43732e1d6bf035f74bc88698ce4a69d219376" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="2a07512164390f728729dd05330ac86bb57f99b5d8e0b45bed041d87a169480a" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="b7936776866c206efc4941205ae5b5247b7b5b3e060db88634a9f2f0d5c23ffc" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="ab80349689ad9a34f5db7bab9e779144aa6777372d079df262f4e5504fcb55f5" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="62003942656425941ddc0c27007c5d25baba729cde99ac3f82ded02d171f8002" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="6453ccfd94a87b8a9a95961ab62bc6d6e5bca7efc8e7af4d2b6e6c89543d173a" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="81f6d3f8757a8207dbf2309d7b71b0392d769590134f2e72914274b23fcaae9b" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="5e0ae6c27bba76ece87ce6a1fe2ef65ba13df5959847d1a5b72a42a4b38883c3" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="9c4e27f8da8a8e41129d40806a83856d967c55f4cc89cc5a27c6ad4a34845e45" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="20effc89afaac5a925b900a4af33182857a8411d6956b8755221db1b77db7283" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="bcd36e3274f941e745aeb340b8620fb47e29f40e9acbe8bbb57c23fc88c49a79" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="7d28cbfac838d2a0ce4ff4549a02a965591e82b88f6d56414b02b9e0656746e8" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="239cd9747caa0f3ebd5caf5d72ffb9e74215dc8291e52f41ef01122fa9477eea" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="6c252e1df531224785702b0ab9de7ee99b4a6f6c20df72df1beb1a9d1ee3b79a" name="java-11-openjdk-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="ac86da5e41be41f0b61d7c482c35abc07512e37217a51448a03a35d8c86a06b9" name="java-11-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="50c39b19200aa013ab1283fe02b35da6165b5917a25a7622b5180ac0ea33a778" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="567c75e17531ea5c61b815ba5264212e02e84750dfa0780d8de099ca4c542374" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="5738d5db834f9cf990e786dc58a15840d9f170c7975420b628d25c226f8769e1" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="0493401f15b008d2b509722f9171c8ae46cc5775edd6d1aa347355378d8f1a3d" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="924c8c4fecb26bbce98f46edbd53526b6d8d4fbc5a258e86500ce31c2aeb1098" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="28c0c9cb0ce242bfacfaecec3a98d09488bb4a59c1a4473fe1048367ad084f32" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="9adc9839e590fce19c6abd3e87ab429015edcbb2cc91173907e29daa3ad33e12" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="1a17b88981201de6a8265c87a58719af586ee28852e8dbf5a57b07ce441e90bd" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="b7f44b20fa008b69069f5feea1a47225f5a31067bdb86acc85d57e7ed8b29755" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="003f167049a448a4d4e3d313ffc7cdd0ea4fb459eb349b28c8ab6b2bc4c941c8" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="1089b687b6d7e402b7ee486fff3b884687d7ffa42baca3713a8b6856fcf713b1" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="0789171f62aa3fa8bcea82fddcade159fc84725a12a466753a70796ae7c9f41e" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="001cd275e627720ab63d31e6edf4c3745e994ce9069f3167aa43ecc94d5cadc9" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="a8623f674739cb6660181c4cc96241c0960c06ed075edbbb35f48513104c4c2a" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="091ac488339591600289dff2bb141a424b3310195f45262d862f7156cc9e6982" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="9ec27a102739335f23081e261b86530f12602966edc6b0c645b95b88a386d14e" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="744c30e1eaf73df5f424d695905da80dac0978239f3968c4b11a8318a48f347a" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="be79049b743bf373c5d44a1f9a2f58103ee176f46b1385815013e358f224e459" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="3310bf8a3e6a0d917ac76823f5208446be4d08dc57e5430d5f24c24c712d6be9" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="6d32e8d115466ad66fea5c67bc05405d00546ca8f30ece6cf0383ee96600a23e" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="5d7115896d354f1bfed05986d10c9e8bb6b388e4aa53598d20f9044c5c990e8a" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="2148b3dc4b2c3c48a391d0ed81322e9ea3b2fc3ad94d88673338952b6d25d4d4" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="b9cfc63f4f941c1761749ea35766066323ec468ad74a156c98283cbd547657f0" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="0335a2cd38893e7353b2a99ad2031bd42df0fabd5d17efb7cfd1a0e119de0805" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="011bafdf0f743ffc82a16436490c80502d5671f63772cc6bb6060d5e89b2ddd4" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="fe51818b078b11ee79370eba5002844744fc228149a2962ac557a72379f6cf56" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="a799f3de5b4ddc5fa4347763413253e7557ce3b384723ec9fe79acf1683cadd3" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="fe8b1a640eddcc8cf523422725473bf4d71c12b372c15dccd0769b9f0d46577d" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="48a5a09ec3629f53b0fda835de995d74ac9f3357257594f76841e647941051f6" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="b9a32227b0c99edc7f67457e5c09da15232316fba566c27aee48534dd946102b" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="0a7af331eb8002774f1ba0f953416d69df6c5cc6348f8cb53b9253eb2d7c7a6e" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="cc4fd3c384f410440813c1a68e035b9e9446b6249282df208bda7b9f8ddf93f9" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="9a22f128545014fc8c1eecf4261212d8dbff4148a6acb76a8344b3db2284b070" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="a45c53798bfb22054ece01e107324132b68c9c0e6d03b53e32b530027179f18f" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="f565c8855d26417d372f5f7804aa2b67df2f918b1ce606a3e7395dd4ff9fb8a2" name="java-11-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="ad8697db265d84f8a24316a27c3c65c64f6b264d1f191c3647d7be0c0c0685a3" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="e43533b764771bfc7f720614f59bdcae532a52641c6f50bae0263d8b440bea0a" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="0994159fd8b235e06970b4445e3ffed960f38caab50ab657a80ecfb3e0736701" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="badc357f5385caca9046a2946df999033eda3a20ca3b07a5880dacb98f885e1d" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="9651155ef1abfc2b04211f41c73290fecbc2ff9c3bb30a76e984f06e8f16a363" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="a1d6a096c32ea7eb2dd4337ad9cf29215b56d104408525dac687fc1203ea1545" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="5250b785042cc65da041fd6c4face89bed32a4975a3d797c876f4e7fb76c6ab7" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="8fe40c8f22a8ff3a6e1e7f4301ac7f9599c125f47fa277e9774b92badefece89" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="eba40352edf4612818c95b26847ce1d68bfd9f3cb2a81b9725efccbfcc4dccc1" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="e509494192c179895d06e4a557883bff9e4d2f348f80ca54ac7193f8ed1c34b2" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="2e1294ac6431c556e69f53269e121917476127f85782f1be5bd0dd5dd2237c27" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="601d2c3521447934791fc44a569a331c6a93e74e67257f7ab1943cc2101b5e23" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="e8b19f0ff5fca167c7f7ba2a1996f13ea8fa8aed32ff66570ebf578df792e47b" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="974959278ab8644130cced179ff211bccb3bbb4911ea94573dfd2a4405698821" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="891bb0e190844c0670b1e3815d630c6b861bd60f6f830413183337199f6a94fb" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="d14a693ad5d67d99c78b761fbf6754c4fca4c1144f99ea9c482ddffb517615e4" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="fc9385c9d4eeb6bcf966b87c1751e95bbe0586ddd87c94154a02936b00cd9648" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="564f79588812384bbf3af2c198fc3e41ed1bd3587b270176c537e17a6b588a5d" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="20cee125bdd69b871a9e67ce16a3125e4e8d545edbe746f18edd7aa35fa2710e" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="af302b7358a44a1c2e657eebb5afb570e565049797db5c7c7c455a14b7ffafe1" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="e64fe4020ce9042d988a70b621ca21222fc999362a6cdf595e6b5481aba54ef3" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="97781a931b9bd24f19ac32c75fdfd81558d392ecbafc1e0a3096894377bd2bfd" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="e8f480f9b62234d7b99eb29bff3cd5783dea00aceddbaede993c8e636c4da3de" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="7c91cc6a7daa880f809cb881392c9f6ae35bceaa039dc6e37ea85271c8582463" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="9aab6bd2399d3e6338448de79945401797516bce0fc16fe73bc411be2d5b3786" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="903f9d6ad0492b33dd424ca80884ba298dabf4ceda0504782be2a62e66abb7fb" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="5efef68c5a0cf3bd4db77cd9412a933c136914a7ed8fbcddeac70c33ae037ed2" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="2ff3e81c8616de38145f525fdcc4bbb79c1ab482edd4ce0ddeea6712ea1cef79" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="d26c69f4b27132a4964f92a7ef9f3fe1195ed69c6ff1fc3e26df389b45ff2363" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="40a84d5445a2066594e6aa7cffe2e62e9c3ee0db2835abe9e2055e98997af089" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="87a5c69dbf31ccbc7fa82115172541dc30a832eefbad1ebd817a150ed3584132" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="8e872ecf5a5e7841036733bd363adde148db206ff7d1b3e26a9836352da81e8a" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="531316b581aabfd6ad3edccc14e6c8ebc470cea9d0b4c51711c485ff8f7ff55b" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="78cb86c3157492bb513087d226aae00e6fad990662f8fddc6ce04d472ea10699" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="79c7d45f5f2e79d482f376ece3d697ad312c690d691b7c851a4138a65e191b1a" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="7f2ada354a86d21188e8bf5db284435c78347f96789aace0ec90d156ff003649" name="java-11-openjdk-demo" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="3a73080d4b90287976216f608b60860b705f82070f1b9a4ddd8739652ca80e95" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="ffb12b77e6cdb283f0ee28b8d2225719f9b0a1d5b917d45c560900c230e66663" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="ec0f70e453332285766d19307b1a29660fed279ca38b74b8d81c40fb99aa34f2" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="80891e8793493c39131211f5e4df6e833c85f5c9b4826c4d27a9f85dad33a628" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="0c6b3f717a60bc54d292c9becc1199343cda781b80f08ffc83359e2017021e4b" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="99d33681f493d45c105619c48a1d9ceb9374569a6af3f15901b05d96f7792837" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="cfd3f4b0f4758ea3471c54c87f8f682845512e05c4369e648691546bb72452cc" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="2146ef17c17b0e9af6363847ca96aae61c57af101a534cea8f2000ddaf90df51" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="b9c88496c235a5f13b7195d5fcbe4acc091d8d1f41cc6c5f3a15efae0b91e451" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="d94545d1444e8dee19910746e59e5e023bd8ff5cb86da96e516d20fc9d0063c2" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="d1f70a0c3f0b0b8f551b2c9335626ac3bad1fc3df5fea87232e767ddfbe00a4a" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="82ae20d2a4bf75b709c75a33e94f5b6dc056b7f59aab56195a8c789d2bd334e3" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="d3f306f801f50a0d454e729a65f0c0e65ca16e3464e0644dec61bce5b40a9282" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="fe453334135f197fccd67792b61e226df368d5bf5913f9c9c6254caf79081136" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="219969001a4dc6af47bf1932a948fee8d6b92c356f18572f5955fcb3d8b67a6b" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="a921c9d6683ad02a46438b645af02346a5c2ce5d17f10d6bffbb088f2032eb48" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="001ae5378eb487060e6a1d90704b14ca07a4eef7ae81168768ff4070f450dff3" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="3e0063e9a4f3f302d3c8d63775c242985f3a31efbfc70007b36a0aebcfef311f" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="cbf5bd0923f9464f0c6f2aa30baacd9fca59dfee8606731687df73437e356557" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="397d2257b47529df89153d4e5cd967027d79eca75c62d07b82e20a1082d88df7" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="6a205620927beee15bcb06cfd779f14fb4b1d2061bcf0855a304eb323269665d" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="c31d6af1de8fca79a25d1edb1ed46e8dd069e7d8a88fdacb67e440d16ce793f4" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="487b3fb29c48076887ff73171d2f8aac615616730dbaabd2e310262bb847b253" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="e12e444a061132c67b196db36efc793a993945a8261e85979b9d26c3b9a583ce" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="8247ca49fce6ecc0dc0cb89a9598a5fb26432db582785ec8f36bf9158824a7f7" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="272a82128ab89949fbd5973b8d548975ead0cd5777b0a7f40d8db8f828528046" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="717be5056c8c6eace3ce63e96b5500f6cd58432a488695c7fcd49e1d7e0c9f4d" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="6446e3340d3f7d3d255bad20209d8a24e8a016bac9e21d5c26add91dc69bd70c" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="fcae510a343300054e008e07b3b2785b9016dd80542da4aca5d3091aafbe1266" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="7b80631ac932e639fa0cee5090dec3054f419cd1d4aa8416ee8d5a1ce465b9dc" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="cb20f87f292096ea797eb0d1e80c9626686fc28b2cd9fe6aa130f8b84eace6b3" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="28dbbfa43f53cc451bb1c3d1e74d477712e6b056967dcb1899c11a3660bed7f9" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="e6b99131ee2429fda0693cb546b483792b792425b821e181cd8d8fab60d2e5cd" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="ac571aac3c8a151a2155a257f21d08b6fdc4a91e5d90f5605a57b2944a5cf539" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="28b68e2d1cb6621448d8d35868cc74a5b8539aa981ae344f06c0b5006b2684ae" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="259b6fb21599ee96014e546aa7ea680ca5945414149c485ed584aceeadec74d8" name="java-11-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="bfef0bceb823e35b392564d35fab71ce4fce3250f4ff0c859d9101ca20f91792" name="java-11-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="f57fc28ad59168f2dfe26ad4cc39e111150fc509d9712af12c08748d0ad2bb10" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="fa6c3863111c179ec73824fec8741e6563989852866fda63dc276a97c4947cb0" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="9b527d0ad928f139ae133fc06e154c09e6c6e173ac34c0a042c8c29c6c3456b7" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="6ff001ad760eef487ffb0099def1443f9456545980d79f953c5f68024d75c82a" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="67a1b1536ef791b7335080b0cfc7383a60d2cd077da2b88cccdc64dcdc51d8dd" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="fedf47362ee554f1031f015590fc50366a47c5f5569b31e61f4b519a1717b1ae" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="e3821ced72041631ee145b2efdb2641c2db0d15cef50e0842d18b9e562ad21f0" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="10782659ebaa23037ff828bb3c15e32613c62b97c98e75fc97a9eaa73bbb70b2" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="9051bef0b7c1fcb4417e386392d0c23fe2b813e054bcf74761355a086562eb57" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="8568e1c978b3693dda3783e844815740d559b84678b7c7b96706e86642969d7c" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="3399fb7a5a58fc20770ef03d8b52e3d873cd8ea963f7a37f0eb62d43fee0de53" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="48c197cbace973104fec8bc54db735bfb9941a26029170abc4aae9b76b81c3ab" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="6cd0335cb9ba3e6db672eb19db7e47236f7b643b0d6c9f883844c9efb09d6db0" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="ae0bb92c7cbe2ba446b92f1c911ba1cc23451ef727c245f70ad133f6963eae6c" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="601948bb5723ad4afda610413ab4ce617977b52b3c463a90086c2d3c1db2f80d" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="032a0c12deba7368946291757ff56787913144e226171334d8bdf15fc10e3c45" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="94ebb8702bac15cb8f781be44ff09bf3b4bf01c2bc3ad259fd47ac7ad1f9c140" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="e7097d77cba9b423a4285b2e4a12822aaec970818f4e3a4bc3ece993198a3421" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="7aa55ba6db10c2c2b77963de2a19325e206771c36aa94793bbc3e7183f1eb626" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="45855e93c8357f3e49998bc58da18fb0d5f194d13d1815140f844f4a9ac4618d" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="d58272850697ee49c3dfc8e805819be590cb16a49e2364fce9e5305eb5a1ac0a" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="9aebd2c2c9e19a92103ba98de54a83e60f5207d915e45c7e17b651f41913835f" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="9daeee08a2ed4350dbafa8b7c8d13db8820f6edcc689b1403ec024c89644489d" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="29caec0561d1936a91621dfa2f6f414efdd3812b23e8021e40cfdbff5e511c3d" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="47fd1e2a72893009a00ef506f0252a5a0ed8f24da29ae1f23a64e482df9e8e4f" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="4e530e6bdde5aea314602f8d743197a069d0e26f7a97d5ee2f6cad5ab0210221" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="ad147114bd699f0f0a9ad15163b46b410670ff9938fdc8ca00cdaf0472b8e5bb" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="38822a5c19fce44667671318fd0b7a6135d7902fba0235cacc8b616b2e68c13e" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="beaec444e8f8116bc6f0bc1bf0293f4e5866a552b6c049be9f3c6c719e5b3223" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="38286524bd585788b802e551b1c668ff06b7fb7d07d03738a7befb3a6286e691" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="1a365153e830efc54e959229db64c0d4c96f9eec40d51e3d7216c1efaece5499" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="0bb9d48c2e37a5835ade4689780e83f476c0dbb3b246489eeb553f727b64dcfc" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="b64d50d4e60be2007ac2b460af730386bb7f0650b310a00b6b66a140fd6cc9d6" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="53075d5c625e4260abeb5b6ed8c038ec7ae5b21ef6c79096fd2f084b60e75874" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="5d0ec72d4f8a6015df048dee6985bd72f693d40ac41b7836da9d7785597e92c7" name="java-11-openjdk-devel" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="a8be99c73f13cb7d17abfe3106a2d939c9934d5d4bcb1a7ea26a5beaab512263" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="35bcbc6f441c54f025255f945f82576c2b3b37526e5e3a02b37a9f68db53551a" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="230eff00fa29706178ffc7ded48f21b42abee1000612dfd8edf54742f1a1b8d8" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="9d40f8873d01f8d87785d61018c2819c54df9fc5cca2c5b1e730a59fa1a72f14" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="691db6a5dd59206e877ff149f9d5f10b797f8b461b0717b6920066bc324078bc" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="b49c471896818dea572260a3218057110d6d44d0ccedc5cfa2def432b6501b58" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="63a2b2aec223e660631a5273db5b1a7d611878a7bf9c807496ea865a14313fe9" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="b8177a11d6a273d6edc8924fe848f0e805c4ff8e705f3d95de3c3a4453f56fcf" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="755b2522403d40a0205a262d827e8cf6b9fddaa770eb404ef12bd6f7b4e0e22a" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="c02ddd158242c0219e8895e2f293e5a83febe18af3988121a54df2ae1ffed027" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="6d2b466b65f9b15727baa9e34a74c008f61a55ed0d201557f64d9e0f78d71b0d" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="cc73f6a1f241fbdea55ceef2042ea8c99184d231aaa54f7222c84eef37876af4" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="4e09085c2847a05e046cb04d7edd2a8f17c2ee16b111923a2c027b5e38a5cf6d" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="cc31e4a047b4562b4e5e2c694d181afdf6c00922b6f77a19cf8dc6befd218e81" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="47f616338505b64f87bbe9cbca2c5c9344417476ee18090af3c6f6126cba8e39" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="f69afa6f233d88494c2cc105ade4fe0cd8058c4c86b9b9d5860e475211832bae" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="7bd6d793dcc12621340e0af61307ecbc8de624f1dc20742fa92c0f23ed4fcf38" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="aed86f4f0e6fc6b9a89b9893ad0965fc4e99b3830ccf07e9a88dffd49a8b3e10" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="dd990e8cb52ed6187816e426ae883183132262ec4b8d201a850d069d6616167d" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="197a2b9affdf68a1aeaad1343e37fe5a8c3c839702d59410dd6a0710bb3cf7b2" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="d43dac041e598a0788066f0ed8e12d648d2ca06bc7ff43f59c1e2e80ae18dd10" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="1125f4066ff6195136918eaa03d7b3bee8025162905ff5abd39ac06d8469e7bf" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="46ff3858a2c1eb8b6ce5885c3480c88556ad18011ff2056dd2226953f220a793" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="5c8478d883de7cf66dd669f62c883a79394cd75c6e7621c0cb4412871e094bfa" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="1e4d1aadfbf509fbb8d452c40c1fe859849df921e55f276e6037e91cc1422ab6" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="afc24410f244f7840e76678e683a1d8fb4ea5485d4c77a6adfb0b0e259b07baf" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="163ea009d21af58daa98463a70ef418af0b01d6ec00035078642d8dc31e0f83c" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="b04340eb1b89b1890927dea0afdf968ecb1498dc0632dcaacdcb91ca54549f6f" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="2783132d888e5b90584b7a49a19db8e474d61acbf75d7a59e433d1ec50493314" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="3b3dd821434a73e4808010d2808e14b3a90f4fd74c8fe29c0a1582b20b4d2b62" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="ae52147c586abbfbf35e420efae73db3f3a97b3a8c2ed6d9672eaa40f98d42ba" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="5e1ec0b177e2bd5db631814cb3c57922ea38e3eec407cab62237a15519b5da3f" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="27cf622d810099a2c712367b3210814a09c8fd7f4cd711dbba70f2d8f8adccad" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="8e280cca7700bdf17c24253d56048183c4d4b44a9b514d8a759e29cb5b253bac" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="a9426a7c2d9f4773e72462c974f5a4078f90c1f8842d778f6f4b01bdddd8ca66" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="71964575caf79db937bff5d3be66c92f24b8ab09abc63fa3e604f64c2ea209f2" name="java-11-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="623fe99da9b83d36747d5876e4de6ef463de7756f6f4046f1d55df2e97e3e7d0" name="java-11-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="e6123913b9b20bc6f678e6f01616570c11ecf2dc1724cf8bc99367f96ec3e847" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="10afcfbc7d1a2d725666618e2d71b9724a017d553af397f3a964bbeff22a5356" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="046754f444e8d60812b454d715e6525b50c2e611c68091a8d97c2fff38240f76" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="163661b6d5abd9caff268c3f5c8a742c71264dada34132c9c48d3cabd8a31231" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="8a9179a26c62d213a396af43a8d0a19eaf182b300a5aa785d0697c3cb383b9c0" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="bc69192cf97c99ed4da270bd63b67602e65503e831f8ba4bfbfa5aaa8e788619" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="0a4144903db15ceaef154320e95d7abb225ea7969c8247d3be58b01d3b4f61b0" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="9c233f01db18c5533a3ee7b987c40420a1e76b919bf54b07a4fd39b7fdb77da4" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="aeadcccae176c9cc44f76597b288e930984eefd8aed0a8b8dc1eae5986b79ad9" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="518c5df9d991f5d1f5bd1637941a38311c4629a47dc6514b06703553b620ce46" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="48196451735028c6a7dbf7e7d0c4c1d5e73f9bc04b7973d5a464b8526be51f76" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="d56596f181a5013c9e3327e15abd9a412c34a582bf50683cba7c28f23ddc50cf" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="60da984d56fe8cbb1c7d82c16560d566930c14ba7fe0e8ed0ec687302b44a881" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="9c5e59d720f602b25321c5a7d26a0cb59c7fe6b415af266cba20ef0941e3e826" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="ee896a3899dba3b6e45a4ed7e3ce679c96441217aa664ebb3b409c642c8e5b2b" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="bcd44629c0347cf255511bc308259af742b6fdc56c9896953c98128f8ddb2672" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="84d721402aac6a2b8596c805cf28d622e4ce6a03d8d2d9fdeb26d119af5eb375" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="5325b70108e6b901b25ba9207c172580923d3af2edc09a7f303b7444083fc811" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="ea0c4a1d65f60b526f67a6c68d22618c0f1ab1cb480c9d6e6f0786ceafd5ea64" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="cda44c08c44cc5cfbc0eef01a4dbc23347d438e427a66425206b066791395876" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="cfe65e4264082c4edb1c83c88839cfaa8e701f6d44b4ee02a1fcafb45826aca8" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="40c8c71d637695168c29c39107d802f11f6821b280d2d2724b2f33639a7d6104" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="6d14eb49d069626868aab84e65827afb38d4d930e69520125e8567edc8a0c011" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="926adff21238a9f1252b3999a24274ef24834a9ee8341f9a1ea84fc9cd8bb30e" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="912f7d26e6fa0e0594da1b0eb484f57c8d817790cc1ec51294d5166e47856859" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="a2d6d3ed68527dd792e4f50286cf957240f6c5070ae920b33c93d1a0aabc8b03" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="cb489b1f185c8066d369a465d6c91db758b75d1de8ed4d04adcee7dd1d110318" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="dd022391db14c246746328b12033f3fcc6e7cf89787ea56933b35b77793b5fd1" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="c6fcd513619fa30cf9a501afa74e9ac099d4ee82b052f8daf80942bccba6222c" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="c49b56a3051abe6c80e508b19ff3767da745706997debd266ec366ddf6467be5" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="c254fa0bb2b1ab08032d3eb31e0af34e22dd1233658f4cf0e2bdeb2777125b02" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="863b0e56dd53c1acc3b68f979dc28b425b131c9de50f2d8ab62d93c7a085f410" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="cce33ad950ab5cffef8264dee335751fa7ad62042140cf4fa9376fd81e341517" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="6496d4d1b311394ba304fa04436321c0a3eb23610539856442ae98e58f228baf" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="8001f3b69e5af05b156974426a0e2de621455f67ff6f68c1c6b3cc8bd51a297c" name="java-11-openjdk-headless" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="483b3d0afb2afd53c21dcf49a52367ebbde14939c646c9b5910dbc4b2c2fec0e" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="6990dde473a0200d60511a8ad3df8b2cc0362f01fd61f1760a0473112425ad88" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="c34b614d4936d7cb645b84c91311499599690f78ec60224d4977ae57845c943e" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="b1a575028099960dc7c87408fbce665aeead1a0cc7dcc19046866de6cd24dd4a" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="36c0f4b8a639db33f93a09b40bffe22fc71eb5669309600d9b703bd5d765137f" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="9a21e930ecd5ce68ba68b1b571f7e937eee18413be6ee67d87b9ccf0e42f6267" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="87c87bce0ccc46501b7e04e7e8968ffddcf1c7e722112c6b2d3dcee3e29a3f8d" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="60079e9b92d556fb929b65643ae0c836118dfcfab409010e50759a570185be0f" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="51556ddd7edd51e48545e2126aeed8c005c6cb0693525f4e2b0fcf633643fe64" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="e14afa1b93453523183f8013f25f54a336a5a131f961af537fbe21205b8a4d1a" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="7dbae4676b224ef94d6410230c916d8aba0b50cd2453e442362a2d67116e3bec" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="fcf8b34b5959fcb1c3f9f687dc1a508034aa4962c727225754b9a42bba4166b4" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="ca2d2b4c3129ee75ca57bb5e519307adbe07378b333f3f345c0e6c852bd7c6fa" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="5e6cde2fb2775beaa323a74f555a0a4f52001875d2b1de2125e112fd59d35b8b" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="07a01496f9d1e012ac4dbee43d9717ed85fd1c8fb05b1dd6d6dd56d0e2323b1f" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="d71b98685b1db1c2c8578eb36537014cd4c0c7ee41cb11885fe3480e3d555e78" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="e234bcb1e0ca9ac4603f2269cef1cda02e029b44cb9938d0aea49b863ed455c7" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="9327091ab25e9b2207d5d75f4aea983cad5daecef7f1b74391a1bff2a2a83e7c" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="310f1492be675d76731177ec58328eb40578ddab60395f75ae75f7ccb07e199e" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="cde1a9651562b08905be677f242dea580ec79ac41f24f1df45c4841198b0d02b" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="25e8de914f236be96d468c76c340145e1ad480271592c18c586d4b57a69ad1c0" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="3e71e5b060268d59d8919a0f145a4f4730418e266071d06df96eff437c79093f" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="94a960507faca11a3bc154ca0f2d986b5f86f264fc9bac2845ba72681348afa2" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="29b3f3d09bbf5e815130fc495c163d43c1a777ac5a19fc67845606ed2d5a0d3b" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="1994ee13ce5b5a0a05c141d8cc506f21c221a56cea16ec5faa1ee161daf779ca" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="35c8367a06fcad56fe78200da96405e5ed9aae4e30916804528f9ad9b989c03c" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="db78fd1e609588f559558687efb83a619d2b17e330a94de405ee5e3a8b6c1af3" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="6c907f164f967062e53a69a30a4336c22a00e52cae58b4ff9e4842045ebea70b" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="2d77d042e36be9906ce2cca09758cac4b6826eae2a0601ff4d2101d54d47eece" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="921581ca84d48e736a8d80eee51987ca434890616693f0432d9bb0614c1180b8" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="8db4817addf4eaaf19ea0b20342a78a06536b97d64aa974ba73df4ae87512dbc" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="8417ea9590c17e280ad05b7cd2b73f2158bec1414318d75c77a27a551d113ecc" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="259806efa6a736358a74097a354d1b4474968aa8ea16abf03e0370d4488439d3" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="18776d9a4a3ff7e55ccd2d828cc5198afecbff5ff8e305156abcbeb4ad7f18a4" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="aeb2036d60c215f0699a3150fd91a42b00ff9620264b4e78ceb09bc9525a4fbf" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="14e0d70716c6e01bc752231a6172e3e0fb7f6d51d9441af3ecbc5f448121760c" name="java-11-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="8477ece5d933a02f341bfe6d4b9df64b9d36811b8502e2d2cb70b94163dfbf4b" name="java-11-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="dbfb481b093c8c9c36fba502f01f975d5998d06b12c321eefdc3ab4ca2ef84fe" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="db7c39cf69e7aba9da89e83264e6eb6ddecd3f24879ebce3074f14095b202b08" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="38eac192750a1f8f38d61785fde95cd2f6c9ca5c3a7c7af981e5c30070e7cb88" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="60245d62693960298353797a443fe2e5655fa5e5eec222709802508090dedcdb" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="751f2a0a738ce36e29bdf04e3dab3e31b419f5b386b8ac3b53be5648a4443f19" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="37f38ad29d928705230cceea8f3537d8eeb8b76ae8d1934b2497b5255750d0c1" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="d9859debd02243c8af3e297a30e7fb8023f28e5abc7faf569f5223cec5d9dcda" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="4ddac5ce085bd04964a1da8754b7a66b1e15266690952c385466816df0c272c1" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="b9990e865192ca536aba9845ce74feb27d959453e1bd2d3aab9602daeff1ffb6" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="8d7e14c9b15e997b726d46a1ff27a0a345f4c98150c90caf6b2a290bae5e6dfe" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="5e8779fc7060e2dc135a8f844e0dc1f376bacebce016d8eaa4487f854b318133" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="87f7a20ec6cc82764d240c30929f606447153029115467cd2eaf842d34a52072" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="6078f02c5c42ec00ee1f3bc685e381a7bb51ac0bc28b849eab0ae18f1606dfed" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="710b8dc841d54ec3e53b4218e736f31fb2d67b234883c5c738f8764de1ad0498" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="c3b530dde64d847f7d33b36c4915e3873ecc85824f75be1d6b4c618b13d1b1e2" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="5161ae3b0dc546d9e6d311740bae1ccb35a4a2ea6cd9b928cd3a188546742073" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="3b3b06f5c64991995004cbcc92a1d78a425907c5ea0606f3aa128eb741c909b8" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="fcc00b79b523a877a2f18426f241c2f48f64b7097d50bba5f53628a3541bd70e" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="974b3c4f7237825a9a21b01242884d05d86a4c78303b578ddca3ba1d031445e2" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="4296e88f373b2abd63a0576ab06e5ca08688b10361f83160b758e3e42b00a391" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="bfb92fd42eabc2b9873a1cfe1275245425d17ee96f7295cef4d8364e9940feb6" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="c3902c6f4931ca1bcb1f8156b7ba7eb222b3354adcacb9a86abb05b618fece15" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="595d79129969a8f43ad90fc597495c744ee46137e2e12fa23387af693328691f" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="ea72d898b42c913fa586625f2fce73a3667d95bd157173e6332d07bcd323a39d" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="cf68a8df0699d01d4902626197a10c8c498da3675cfe534b4e82d6c36465fb75" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="3c2215175971e570ff7493a07cab755e7c40608a39a2109ee65540b56aa686e6" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="6a118c4209ac290bb2d12aa90c0425b4056f61b76a535cd6b39adc6ffbdc2cb9" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="d7a08a66752f455aecdb1615ff517ebfcca7fa70252d13c1f508ac0ffaf43383" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="b4f70153611a14895c0665308e7b1c82078e1f4196468fdf1b8cd6b4ae21ec60" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="6561844014c81f4175dc80d8274786263ffb8c62c322450e3c371df8bcbb3576" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="8a336d72e163f3e98d92b7d4e75f8a98b4baf666fb0ed13188b85360238e2eda" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="38cd8ebf7b228829f9806ab84037c008d92cf58817482eec7c819e1e97afa5e5" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="bc9d6ea8d446a6c14088eeaa7844299152fbc8686b1aa832b4231ad9339f7c70" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="f6cd783e05387ae9c4097c2da69158f284eac772ffb7a0fe4f9489908343265f" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="87ebd3ab6a5ea74e39cd46a1fbc64ecafe0cf880f48a6895455418c70ddbf4d5" name="java-11-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="e795104affe8e908bfb40171aaf0a7610da5edba6296a50c5a05d612fa7ea7a6" name="java-11-openjdk-javadoc" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="ae53c66d86b81c39851f2c3c85ded54b7f29b4bf464ad6fdff6f836b90003866" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="8aab977fbf6bc4b730a61437d2680c02086048b7f183f6e0335cc956bf47a2ad" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="c0ce09d5bb8a0f5430564c18538a26cd04f20e5f88dcf378e07ee75611c42e66" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="9d0c671f080eed62937011b96cca0ca50e18548ca9c81c35a324a13918bf3cce" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="5b16a88be00dcb668bc93ddaf29251318b987b783b6e35d8235afda770ef3a4a" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="810fd7ac1572d5a387f9701603b454d0a3606eb7b6c09eb78f0b72a788c12152" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="295317e4d4fe9e8949eb767be4d3a9d7f52998f8e4a9de60ea1e7fcb0810956a" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="7451ebc012e42c1a55616d9c69077c9ca80c7e1fee3663c98e9c0b2c33a1364d" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="f31cf6eaadbc2b7564013e5bfe1dc1f6b4fab8e5b355c2ab450398be55667b85" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="9ff8c93e88f41095c650fa57877631ce31ca2563d7307acaa10055e6842a97eb" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="b2f0ef22bed70016407033caeb0967d5e63b91aba585d4b0370c4551a4a4a866" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="05976c4a7badba98a3243ee9d6f3d34d2f5cb284c3147f8cc5443d8f13df85bf" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="32365126807bf093ea5fcadb0f98b0cc5aada4dcb60475a0f0d5756890e749d6" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="1e12b340ab1030ab12e61840e7ac07045e69f5c46158ae92d90dfdbd7c1774b0" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="2650f8ed949a2834da5533c25cdbdef7f6e844ebbb68a81965733881e5b33876" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="9f2eeeac8c23b77f1e7aba74f71659ea90d9b55e58f5948a9dfd7f2037cb8f08" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="8c740b565e10cf4e84a11f4d11fb5a03d08b853c54fed81ce782cd1c9162b0bd" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="54b14cbedb8dbbea125aa92daf92cb45ec7f4d85f5ddaf6257fb9b8d49e36d92" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="1edca9edcc6e4e21be9ab5e0c2445189de85010da42f124d2fba651e1f51c057" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="949307923926addfd9cefadb83b6370aa5c43e11fa2cf9d98d74d4f5be561086" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="0d477aa6b40df9653b7aa2a138833f09a2a8b969646dce3bd9b2dd5fc91f2831" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="eaabe2ff0dc118655cc5dc1da8c93336b24618ac91d5ba07ed7f675cefcd6dd0" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="4e7b956ff550ff394630834ccc480c0a659d79f6c428e1435562504eb78a44ee" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="d1f6f63d2cfccc894d4a0d3bff38c27b43852595c81d6f2c90a3490437a5ab36" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="82f2fe15292c29492f340fa046cc74c212fea27e8c7a420cc0c34115b9ffe268" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="19216be79232cba7d6496e4891958828b79b16044aefaf36a0571f68d369d31c" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="65e94bd942525363f6c8f46efc383d0379208c6206968d88e97a38e881e1fcb0" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="ac2e1ee925f239750768a58a341aa971f9c97d9dad68cad7f78545f33cc9f06f" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="4479e411a3e385783dc623bd9fdf570bcbd0212fbdaef7a7841dc62907e45e23" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="e3730d9b4f8f8461dbe3db7d3c91c3ca2020c3c0782e3226256436d2a58f091c" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="b1fdd9b259edc440879b6a5b0510c371c12192b6573bd5302986b576f87b91eb" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="c650b31893cce326029e5f2ff6dee975d04bfcc44f872f38f3437853110ce788" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="6a0b4ddefaedc9b0ded9499b8aaa51a038f49cd651db7bba0e23848273fdd671" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="f9b19c73a1bbe0a8704313aee2c59c8365f41ecdfacae16f850119feda028bfc" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="c9958d171d29ff1e16376ccbacb9c088df3f7b4e56fb12841ed4c0c57bba32ef" name="java-11-openjdk-javadoc-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="74378eaa58182ec1ae9181fc6d82f76e331ea85c2862925d75f3adef3806272f" name="java-11-openjdk-javadoc-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="3b4e234725777dbe7947b66f7df233663929671b420178c261a2ab4c76b834b1" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="d37ff847eb76f62527847e20ffe41bb386f64ab4baa778cc15e198f07fb8c2d1" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="375df7bfd4f8ffb3ad2dfca936ba759cd20159b808415210136545aafa2db9f3" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="388413b3561f0a99ce20f2ce1f62002a5c0aa8bf6860ee716e1cd45f3caeeedc" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="91ef8ae7d40750e27dc1954f667bdc17487c0c8e29ae54e854c86445e73bc175" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="f6be813259319c3cbcea6613b5a17fea05776f6bf86a04cc86fab92a8fda2743" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="9dcd483e1363d391df3424f3d339f3e381a29fe74c970ee00a9d785fd40e2eee" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="581f1c3e4c2323b9d5def8f754c3531c4faa8018e75c331014b00ac9e0211119" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="a236159d2e9181a5aafc0ac392994db0385051247efd25db31dcf4b70e620436" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="c9fab1defefd3993efa12d98fe83d7e5ffe5b805b3904673e03e16004a70ceef" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="6efddffa9bfba197d280a8e2eb36a5ed7c92a9544784271231354ab1dfe66654" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="6dbc1d7bd76ce1fbab324e32e0ccac0c6317962fd35a2a542c7c529554298425" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="38f931c997ee1ac9dbcb74244ad18ccff960c3f0f2b47a69b05ae059178922c0" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="cc11cd293b2b661c92e2cbeee7019497d76e8e724365461564ff2c7b0b955ac1" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="9355111efb239f834fcf97714cf3632a7bfab4abe1f4dc0a559b76fe28e29f50" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="1dcdedcba818e86436f9e0801a4fbc1a57312882f6afde7a3c4671a553ef7d8b" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="5c2073df8f4c60678b7a52a57a9969a54d9fb946b4ff16fa216e5caa029a39d3" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="5035f4c6a1a3879a6b3cce01758b3f773357a8bd2d2c50c81631885a8e953a6f" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="72a4500b7435a95f3ede68f6e0521ff18fc416f955aff1ff61f6c30360d3d1bd" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="9d6b0bd1893a18276223947fc74a7f7e485a47b9b61611adf168ec80f031e7c6" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="4960114e093a2db461698f193b3432744cba3ae6c8778f6207866b31670e6247" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="3fb2c5b2d8f661d763b6fb428696f03d44e1c4d799a2186b89969b270d40b94d" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="2d795b8f70345443df2c77832e09c666ed99312560ebfe0a9713813c95e1a641" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="5486b5db3461f0d5824495e8d54c6e368925a9e67b18eee9b34bd6be0a276774" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="976cc1ebfb7fe713750d9bc75aa6c6e6374bfc4e6d0fb4389ff9ee3b8123e510" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="300ff4f2ee9bb80a95bed2a0c0553e8cae7fa9b9046f4753e4de4da5cdaf3e78" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="81c2a76895419aa3199fc830c7d5d27485df1d75366dd7dacae28888f7527e61" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="c9ea9024c80a4577ada2c4d28c6ce36f7dcad5d1ccb8972fdc25d7120d8574ed" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="745a6591a9f5ca8fd494203302575c134ff153378fd2949ab5eb42d3a054d713" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="54894d7ae9723f4f0822e1707450bc856d59466c4443c6038f367a3f99e48d25" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="204169081cdda724f46a428a890ace3b26f579776a6997e305e14b7ac1bd72c7" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="1a3d26dfb97bce27c2f5ec8afe722c31e81f9ed7ebe2b34cda5b50d021ffc81c" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="a4bb31d515edad2f4ceea3a54999bc1683798485438d5d8f1e154d82293a9b02" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="c1e52c4185733b5183d1fe9c76e6a3e8144edc4fe0d765e2c6c2d4d51937eb27" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="28f6ac08c9d32aa0711bc7c70f30e330bc344d437ba6292aa883822ed77fde09" name="java-11-openjdk-javadoc-zip" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="2febf98bda07e5977aa1f15b5ec89c4e07a451734835711a3d367f8ff5afe19b" name="java-11-openjdk-javadoc-zip" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="6ad56d12ba2f86f670b67702a9a46afcfbd4d91c2dc0eb26f09f16dd4c408ec6" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="ef02b39cc99b252af507ee3986806966c98fd332da6d45de76cc58d51c27c248" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="231519024c770160b099e6d7bba8ddcd6d2cfb0c870c296a0ffc2acc1c55b3a0" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="d55211e2a0b0b04c3b6ad81bfec58bcdc654d7120e9c336c87bbf1c375a85141" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="1f1b8deeadd2e5c28cf223146e6c8009cc8edaefc2a3a43612fa4864d733c88b" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="399224b7c50c995595456916f173689a5ed4569636ac1bc530f83eb3e9514c1c" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="dde33654eeb1c2d9bbcac18c93f9743c296addcc8836badecbaeebacb3b5bb44" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="e8bae44924fa40cd4ea5e6648d37431009c8ca3e0b38f24cd6dc0ab5867119f0" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="5c346bff25a81361c33288c3e79858604e23708e03d92fca9289f638cf98c395" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="f694e842b54563e16332b81d98d3666ff7c9e5406c0fd7f78df0046311b2829d" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="c58ceab810e330b6a90bdcfa462f95d3b747e26ed17c4361022b092360ba2e8b" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="f0b15efcfffb9af61362285325dd304ba66f87ba73ba12b95a99a0aab7887b19" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="5455b6422e2ca6d66ad83ab1ae052bd75d885985db3b2904184107b01e2b040c" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="c9683b0e0c7d82019fd4b0540ebb01659cf3c8c9b1ec0681b761ec92f9639f25" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="c298712b18e68d2702f525cb9d88c6c0e05035e2709923a82e0348a5846d4359" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="5960fd8b6bd64c68bf478b90bde7b5a325b1ae4bc7d684c2132bba4840bafb95" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="a6b5f435b5ca12f08cb13f704db0bd4c097a3cceab5e93598fec46d3dde26a17" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="bdade2d21144d2fe4ca52cb2155e33900a74bc60a559a35ac7c21a24e53bc4b5" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="ee1c6524388ee6f1dac97e84da1268156f247926573640afafbcfd9ad07548c6" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="f479dd5bd8cb40aded758c1d68400eec34137802979123a15f6cfb3f6e733ecd" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="97e6151c26a904c92890feef39f652182f9379e3afc7177f16ec1fa773c249f3" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="4aece31eb5f91e9440ea24b05e2c887244c1e1ef7d61a63445c01664cb6b9520" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="8122969363db59e40f5a82c653f27aeefa53b088f6e1fb70a5f71dc520d5fdea" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="2af9f066ed16e6d01651b3d02ef6bbc6d8834348798f2de94ac5e397faf9b1aa" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="fbc42dc3ee0c4d0c8d71b9a97f17c1dc804cc344c43749aa9718661e8ce89baf" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="cd06e9d0ead21d8455fc63f9aba57e32d5ef367bb0339b9b99881aa13bafe743" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="a26cf8909b09678dc834ab36df5b58034f5d9bbe0adf52875256d40b49355143" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="c89bafe7874373b736069999adbcab61d9b3afe2b40a8333238f6eef1e8d1f81" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="858f98640746dffcc08c0647b9b0f38430f4e0c807046566b13486e46e849e76" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="a9b2a1a83ed38004a06739a7d3d1badf8ada5f2f5f90a763d6f4872601b4fdaa" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="2eb861ec61d1b6bf2d7e5106b2fd01e0b492c4cc39434e9447a37938bc80e65b" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="dcbedf13c35f0dd4e00bda8a72745fca4a16f448a59bdd164c4e8f7079286d1f" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="9c3c2052d68780a79359838db81f99dde847426315dbb63dd962ebce2973aa81" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="91e93da452fb4a0d96258c607d17c3e6aa8f35ba6d0eeec186b8c3327a27660e" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="e36ba5fdfd31b500748851432079d23d103e88e79b3555b0bb4af02d7c28b1d3" name="java-11-openjdk-javadoc-zip-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="cfc0ebee75096ee74c05496578eb5d8acac27a2781c8bfff43585694245316d6" name="java-11-openjdk-javadoc-zip-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="35d719be0b46fa999039640ea778e7cf84787d9a982f2998321a76c24789108a" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="86981baf9a858e0f50e53ce96a0bcf3cbc68b9b10d687ee8a698ee1627708406" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="ad2944b2723520a163fcf152c6bf12b530006b12dd3ee1382c7c9a57a1a03a11" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="6631b271a29bc3cb2f48474041310e989a0104bcd622be1d537680c3f33bb89c" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="01fe3b96e8bfae596cd0450c0907a1813fdbbf1c7cdb0cf5ac86ffc0f32006bb" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="85f847e6da52d40645c07365ca24dec2b2c4c3c046b10b1d7a7319c0166d6726" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="3564c09048e5b08e4ac03a37a179a3cdd5a931d78543425da695e30d326c82c7" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="88dd0f6bcfc022dce1d72b9d7988bd9c81fc96b004988dbeaa4236078afdcc14" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="3b8f97705f5260b2876b6a83608945eb4843fe7df4a89592d6af9c60c1bbd783" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="372af110b51a0dcc8dff0992754d8338464910e6440d62a51d5cdd037205ff48" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="b55e3b014454cbacd15ba8ed9ad538b4a295bfbdb35846a28f76ac5b926e3aef" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="273d725aece1eb08e9df04bf2e1d7043bb4069d164edc429345bc67c3f6407b7" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="ed038d8def300479db813304b504cd0dfa8b4268236dc3e345dcbc1ae299b02a" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="19e4d76493cedfadcf697da494ee179218dbdc4975be563d7ba7b09e0a14a8da" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="52d4da89c306d03bffaafc74adff8087d6af8bb654240d19b630b96870625e49" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="7c5cb8441f217001090779c4c36c7d566570c37f077cb138fce5950224b43825" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="9d9b8436014babcabf1e726c20c54075dcd51de19671e2e9a8b85f1f9e2a2e68" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="0d4862e51054aca798ee05a7f198b54c5bb04ed67e312e76f3852a632cad7cf5" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="fd8a72628500e2157a99d4a6c9f6551bfa5265990f17a2b69d89ac0e9d3ad3ff" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="0533cee11ea35f5c1e135e04a30865cf42eef1398f7ccd8f8c4e11acbf39794b" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="b0358452dc4a02b02379ac9376f63039bae37ae5bcd6816fc014ca3e60d8956f" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="1d108ccd42c032d80383339183a96a0cc2da9ca93a6b1e510639aff7fddb1727" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="e6a20c84bdac8fb1b8056d1245984b12c8055a842474e0db501fa8082e5586eb" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="d905e0f6b65d0b3272d4e73a3bcbc77ac39340a344ffcc7e7908c24d9c5e49d9" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="65ae561250e485ca20c7334c1b03b4c738a70426f5ed5ff2da7aec5e2eb61143" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="426cc264ae0d02d0d035fad28d812d8ff0000f6858e8be5fc9a96d10c2e9d816" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="7eb4ceddde5a25f16e5744f3cb6415f028e3d033056f619d8e42abd3c3e15dc5" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="d8d061daad6ea850add9197998159c5866003ef793151f36d3217106b8c666cc" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="d59bf7864d7db46ae96545d00bb86da13fc7f32ada79ee00c34f17d24a83b958" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="cd64d08e7add03f4587c81fdcc75684612583532fc686ca533b261690c4fafcd" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="cc9ec46b1e317f0489df1a201308d347cc22c515407b43c2664adb6b26e343b4" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="5c3ff0e78800a13afcf6365677bfafedc351a770bdbc78ae23c1ae22985526d9" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="7faef2a7fece57b46c3db623dfff12cecfefa9c2204b2e18419e781992c380c8" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="6586f6746dbe228906fbdf92b910bfedfc85d4462854faea22c7bbcd36cb23d0" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="0d96b747b090758221cbc89a648c217a2180649d76f42beb20189a3098506e40" name="java-11-openjdk-jmods" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="8fde8bdc6d4d8dccc4864d79e83858af6e919b733dac4ee5916cc2b1eb3f9e6e" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="a4cffe789ff4bd7334f1c6c038419dd4dc97fad6618c8729b949cf4974b66821" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="6096de18134f0d081c7f760d508aff162f4f16345378f6000a79e1cbb886cb6f" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="47922b14b9d7d7474521fa3bf2f0fc8250f9e331628b2bd2c71f1fea6be5bb9b" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="e4a892721cd45c9542a2778578d625a008728fdc714c6c239533f5c548057dec" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="8a99278846b5ac43e46522565e0842734489403c5db19923c4bd36fe772fd087" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="8485bc8951272604647201aa3d49c99314d5cd6748861f9901209f013fca205f" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="782b5c024614a4a013f39b7a21ce1881ee9380864594b7f9cf2979147209bdf6" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="df60a2a9376d1d6c938592142747c5410e8b86aaddd1744245e83bcf7dadf311" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="b7840a64f5270e4d653d5107cac981174d054c7405df2329a68321826b8c3589" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="0a05ba94401f4cf058acf02ac043ac23fc49db60f994413d0de83b8b9c658c59" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="98bf4fd88844ace05b8622dc5c950f216f32a363ae1c0b268ea7b107dc65e3f4" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="4dc21c240ef003e2795438f7ef61b6a94b5fb63e5d0b571973e73553c175e963" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="ca745e8d97de0cc51abefc0c50ed4c46bdb88ad4823d9954b596ed8011f09238" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="07224ada000546dc633dcce1cc3bfe163203d74a8d6fc7490ca4ca39275dc439" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="0ba81e806c868108300b1f4bb06fdbdcdb2c61895a2aae0ac22b93ca71a5c130" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="ee81326555984ed78e87a95088694aad530683d75c767858e2b861d7698082c8" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="94ad637774cb3e446ea239e55fb7ba2f6bd06f9f851408d7e8ff06679740b6f7" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="75c3ca69bc4eaeb6170da98cb204946af94d90271a52e62313f95def671d7228" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="0ec67ca49af955f9650ce4d855af76117219dc0f69d8805984056db93e776503" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="2fa759ad0c1d3b894ff68e1bfb2e551c66b3f3f0be65d6e7dd156d072af113a3" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="4fe47d25a8893042bf39eafa434fdf47e8af482addfacf721faeb214d64a22a0" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="3d352c932ab8154d3fc8e01a416a42172a8a53a433d26bb8b807a109904bd99c" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="c3481803e6979a258184d8204f939c6ce906ec9764a10f5a56161d0089da76ea" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="28e4ba81a0b4a7f5a44a393de757fc617e615760e9b64b6c75ec22cabe0e078d" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="ba63bbe367f2e7793d19274ac3f58a40a87ddf995e1da7a8d2acea3425c0b4ef" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="0a75538f84abafc1cfa618359ef0dc1fb3cdaaf941664716e7d10527a6a6ef46" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="e0e436c2474ba07b32efa5f17666e9f0319bcf414c2cb2aaf618ad9380889bfe" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="de48b0ad1f26172ff851720a28cc0fba895765d54496946cc2bd4f476772942c" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="8646ce8ca5445658995c09460d0e2148e3d130b13da1bc4bc7954188dcd26d55" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="0241ed36e7f6d7165e4d68f16b1588e44f511b0057e67b9926a9710c1fbf3cb7" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="297d56dc91db3d0a8c1023858b31a8eeabcb9e18d828d333215f8959a7cda51d" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="da30e8a198b58a61838141791240f5db87ab19e50f1dadabd5557b5873cc2b76" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="73d426d2085c86da0e9e294beb804f71034dcb570682d41bc20116eca157f5a5" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="ccefcb688d0011cf5d569ba08126a0c891f135fe7c90738c7e7e90e9072eece5" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="95799325199257f968ce4bcacf89798d5fc25f04759e63be474d4f4565d41b15" name="java-11-openjdk-jmods-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="78cdf31ab6b1a281c4244e74bc2c6f261370fe004edb4341dd35adef45cfaea7" name="java-11-openjdk-jmods-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="82f46b6cff5130e1ee39f35b4a2c315546d2e9e70713b5b6ed532f7541936e60" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="a294d9500d89270b369fa3ede683c33e5fe3960aeaa2a093abb02b2a6b0b42b2" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="1a052a6f157b25d08f3b601022e534b76668c369802e5c378c50397812e6b3e9" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="aef8393c34d818c4aaa3e1418da1c02d12d318cf145086a45ac7ce545c60bd98" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="16a3fd502aa1b5a91bec51bc4262921dc383473628d9f29a5e0bf3704416de52" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="b8c58af801b3b1aba85fde3c88281454c0c7668cb3926f87def0091fa36ee122" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="c30d8129ef8879e0c8933ea58b53ea1cf3f486686a9f377132dfe19f13d5118d" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="18c451405d1d63dffd87a517a94d0decdad39d6b163d89cfa71188dc5582ff8a" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="d52b8b8be2f443574e11446b1cd7f3d30388e7a331c58b84f7e70d06f3dca106" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="fc57373ace819de83084404fedce87ef202a0fbb061176ff69766a849775bb97" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="abab5dcaedb3eab3cddef52e193e0644f03d016aa16ee8d847767e5940a30ba8" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="1658ad64e94e17a2e8825f2af4092d815eb8c0652bba81078d9f8088e8dff497" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="6c888ba9a4809be5c606e1d1c072bf37cc7e61bb921d9a801abfafd632333d30" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="4441334c454f08b67b679170b63ba9dddd9d6dd5478429f3754e94dad459187c" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="ff3d4c0dc4c30c38df032e6e93eb7e7a6cfe7afd53bc85ab85d52f514d063296" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="ecf225e6360af3fbf31e5327b14653ba4d13348fee46293576b3978d8e000771" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="a622ded57dc89774ea44b6dd54b9e9c13a411713acdee9299243756be0a1f926" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="d6d196320bbfe00047155ea9b5d3212cd5746a7ad37a5b66363b0b4aa35f682c" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="66f444f3d0e4fc37d91f0e00c451e1b73222b9e9a5852bd8e3f8191d6a64b8ee" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="91fe1cefa8613fda4f8cc22bd9322f5a3ef39a6ce9e221e0d53e7cfd5037c16b" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="c429dd3d7abf7eefb8c7d93435ecdace85dab05a5c3aec41ede213f3c2b4944b" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="058fac950ed35bdb71068ab3be40c960df535863231b1ec9fe84aeef180891cd" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="2a0dcd80778019683fb56c74015f3f56711bbafe957e93de96f6bf8c0761478f" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="c0749f33e8f84181ec4bb79c3887a5d051759af3b3d261f06586d6406cfdfea3" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="0e4229447ac9ac3158d5e7d8fa41624ca919cd6918fcb42562ef0c0f5e46f82d" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="36260b5847bdab1ae9ee53faa27a5cc391d20799603c52097289c660c92e02b8" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="a6c2a95eccc65984ac1f5ecd670af363e76f935c57b648fe3a3ebc2b18912733" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="7a0d3f427edca4ce5ed1eddad8973b568dca3592b1e3c5732543b4c89e344a85" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="a1707e678f6a1db8b05a1edf38620dbb2253d8e10ec765c9b054b766e68769f2" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="66ea7b8df0c170297bf8f1994db14eaa5506bbe652ec1f494618eaef06497bf1" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="b4c5728784373c3ed3eec7d3c511a39ff4a422776779ca28fd900aa2d792c377" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="c7798a3f03825cf2b6143f870c360ca812c786cdb66b03baeaafd23c202c9424" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="4e60f66a23c4ca23f9b048f78d4ab73898e1e12ea5ffb0df51e3c70660c850f7" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="7a750eb15e2bee15a49a2e086cd2dd890380119de3bd7b06692cb14a362e77ef" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="cc70740ce28e3d873a621845c989cd72a08102033db3f7f4e294217ad312733a" name="java-11-openjdk-src" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="783cfc70f7b3e0c40e57813c456d24ab9bd14381dbdfc222e67fd79e08e7b7a7" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="3a8aa96dcbee1bf64a67232e8d299dd53c7925c74a05013aed29477e5b5fb21a" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="c74e7b04d2571b6449bef3be8a25df5d42488c3fd6be76b7e6bbf5404db5eee3" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="f183079f0d5e36f4bf33bc98bb9d86f7c6dc2afdc5953a48468a1f32f77c92ec" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="f5ec590596d0c652a3233f273bedf2405242ef2957ed21f0b8c78c67fa45bf30" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="a3d258768c2be88d7b93f31cc183632ead1ac35b783de9f44cc621cc43ff15bc" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="544c28f100114cbb9307f633275da1292d61c76c98f5b299edd95d38acfb436c" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="553ad9e71f218e370bff5dc6eea60d93f812b521821943ae02c74ee625baa63a" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="70e92fd1c37c54b8522885df0ccff13bdfd9549245a223c7a876aa07f401bcb6" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="0a87fbdbf23e173a67ead2dccc4999a1a76ba2f0d1ddc54148e11f9bbf7514c6" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="c7fc47711abbc89027110d47e4a0475a3664759f038448bbbfd67167c7d65e75" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="285cd7ed684c8d9a4913db2f6a469342f0607f4edb72a607d83ce5ce560a50f4" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="6d82ad4b4e2451f9aec5be7dcfb5faeab55e1398ee6071c92f1eb9a40cfdff5e" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="1780c2a45474dfa436ed0797a95fe689cbe042071ce913d24df5da20d9148d32" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="1f8e5d1ce605f504c97a239cce5346151ed849a8721ff3c08fd0b57497b6cf4b" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="b1528f37229895d9cbec90f3631fa8b50131a3a048ee693874798f2b86bbceb4" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="939564cb608dfef155acd969a9a1c8172c6ff6a831482d51cc024c8416cec3e8" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="5f24498b1d9a4707b03ff564c2e8c52839985741626b7dd0e81797a2128f1a6e" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="da7e227ac26e6e5b0f3e47a98403fbd51bfe5d053d17f1dfcd2519d41f39b183" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="dcabdb984417d9af6ca2d69b86a891603f6ea1b51008c759b7dc078a8b4c1005" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="c0ab9eb1d16f0fc077b6e1e233df7c0b6ee401f5107aadc4de98281e7f7c2493" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="b62c4e57aa470c45877984f9a3e54396b7eae8e49425ed869051607807a4cdc1" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="b6508d6bfb7ddb9946bfe834a480786db7d250abc3f32ed296b60f102e3f66d4" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="2da41bddc0c6ecab751a725a467029d3e28100a6d9ff8671207c5c94c1ef0547" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="4b1a2ca1ab709658db9cb96d403b04668fcafd028d6bd50c86c035216d220ab4" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="97d79a4ebd26bde2d6685ed55f89fe0c9440708d464bba5cd962266e995a2c48" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="62777b29bcdaf05a236a43ae164e872a9acf3a218f21e0976747634e2e7875cb" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="67cc929ac5a4d4bbb2c54f0881dd1081a4e704a008e12706a8f400b1944fd829" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="eddbee2a5fe20f2463eae14bba359e4bd291a8e4c5fdce761f3d6a0373fe876e" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="cdea26d3172fb0c4c3ffcfdcb6498dbbc46ef2da1af17c1c0b71f2c035ef5ad7" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="39d7dbebe43b0fec857f3e902b58f9eeccaed710c2f0e9dd61cd20098478f099" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="f1861b7712e55d5f2ea6b19ee523e5b3da1deaef6674610f04c589b3c6a8e024" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="78dd89b5695c1226c05e28bfb9d4f341191b65f8da238e1b5f144148f95560b3" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="083b5c986cff3f1a8cfa90c6eafc9c639560a6bedf7df9ef6bc5212549f8900a" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="93d8ca722a2416a660fd866eaf3c1fd98839f35e9da929c9cbf349ffe0ff92ac" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="bbe8934a7d91a8c69ee65a86a28000bc5df0db66fdd5872b3520d86f082fda43" name="java-11-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="f8e236fdfa161bf2158142ecbc05fd83e2f7c82e66f1e2ad7988d9138211aa45" name="java-11-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="997aec2cb9adb1de271d8d5e41cf75f24c438dcda84effeb5e8e1b0d956f441a" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="f7e2d59c25321af91776d8c1220e911ba714dd3d3b20c95818e81bf412c5c585" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="8185fc754879ba09d5a9f51aec15b6db90871cf6ca4629cc8f0cac86445b4f2c" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="b995ccaacdea1caa299d8a78882bdc4b78cc4c5d511e3c0dca66a79319abd26c" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="5fdf82b9ca590f4e4cca415661eff88d88f6c728b7157b5282a15f49ae2bb4e4" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="82cd09d59b85f9a836cf30b7ba415574e659e896fba27e01cef6869960c5ce99" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="8d5082b96e6ead7bb1c0733b1464b300c53cbcc792ddd8fffca8c626afbbf098" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="bbf42413266ff05e9666af375c7b1000487b1eb91cbd633211eab00bc51bf09e" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="a5af29b9c3b8e8312ab3fa9e3b7cb9206f41ff332bcd511cdc8f61a557aef747" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="a08dca7a37389003beedaddbcc3c8f0db15279628dc3746562632aa83a747695" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="0bce56be5fd28106e5dcbb3da34f5ff717c756763eebc1910c12b47f0ae9a748" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="127ff6c620e04495b0a2154f4e3c28f064406ae5268679d222f8a40c2fdbc6eb" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="80d63ca9452a15ba78facbe21904c9e01d92c2cc434c4617a9e31b7b5683d76b" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="ce6bf3bca74a5e98c7ebea41cb1545d529095cd8cd925d4731cc315a518b9702" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="3e661d5514fe8b029f3dc1f8b0d6c20e317e0bbb907ab25f045280b4284738ab" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="0c037afcaf4bbedbca826ddef0a88871d72e77c407f2364f6845a150eda71c9a" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="2f1f3194c1dbffdec65c44f1b846eb39946e43848b4952f7ceb264291ee0a8f7" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="ada624a7c7177c2d212f03df338a8f8ef4b9455218cc034c83f544e687f7767b" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="72b7e022d5780aacbfbf518757fb70138e7641533682809de13d1db0dea16277" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="1f9679fee2569f026b43764ba1be15a89c2e4d1b97749197c262f85f9badcbe7" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="a31e0b736b6d766e94e7b4bc9139685bd5494893b90fee87b7c9e6008c0ff955" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="95cc6b1703d0f92036d3c00b943eea1c353973872ee6479e11aef8f155b985bb" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="0417393313e95ec7b30c25cd41bd2b550453b4a763811331a38d456e977f3bcc" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="d18986c2d88c291bc9b5d5deeb3aab5352419afa10930a19670336f6ed1663cf" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="47f3f8e41d2f549889e899c3ea1549fa17b7d180d2545d38570ee395b376b445" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="08e7e51288193e8f8815ec429f2a4b3a9a7ffe2beae988fb7bb2a5927a1b410f" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="8172b7a83cce410e4274d6a3bbeed400e092a720c6056d061e3d825fa0be5fb8" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="62dcf6936fcec0494980dc959b31ae59f94604e4c5fd16205a1e78cd1b4e4568" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="e029211bdd9be7ee1781c58e6e9b6edd26e7c01f0b2e45df343760d44099d05a" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="d16e30300352616078b755f2e48e501e30dccb1f680d25737c8ee40aff1cb1f0" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="9ac807c9c6a8b3dbb16984ed09ac6cf1322b7a8ddecee1eae41ca67611a7980c" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="918cd5ea87693a92a0f721ed953cc3a45f09151e85ec7caac88180f212c13009" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="d2ac88e2bfc28da8db120af9ec49a1c716d091b64f466b500eaee4823dd17e10" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="f7c5df7d66e11bb5d42e4285fcffdbfe65c630f6a11d70f01819cd2f5df89fc8" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="e556db2e3626d4081716aa6e71d07cdbc079ecd9dbe8581e3fcbf79749aa536c" name="java-11-openjdk-static-libs" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="8853c8e04164943b59b66c6d0dfe1f564af36173bab81595cffb1f47ca48bb25" name="java-11-openjdk-static-libs" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="d6759b66f459e74efaaf31c29eb9a6b44f0d3a3de099e7c10c8a5bc56c6fc942" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="9d2ca2da90f723964e93cce3dea8ae44fadbc117fde44e2475bab97916f6b8ba" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="dc1a097ec834c5d6da835ddb8c3ccff379d772cd46c5a5ab5684de936843bbda" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="470d3dfc19783c90835a94daa71b3599ca9ab6e661b2c52b50b1a4744a986f7d" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="d40d9d32887ecd7e1d376cf4cc7c1016957b5532808cc4addee4fbf744944ee1" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="b00d4c5257b92fe4db2e74d8df07d86d401cdf9a432a1fa1fdb8d254d2f4f336" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="75b90499ca258787f494142401491c91a2f05bea1d0b6ec52b0ba5d5b6b71435" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="48c3e19205bb7fe383ed71bb1719bbfc6add791efe6458376cc06c039848943e" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="fd4218a9efc0b55468e732515975e8dc79faf35f2b1133bcb35f104f03cf3f3f" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="684a376271dba235c347d5cc073976321503a30b49401cdebf5d661bc4150b43" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="bb1603e449043c5164a54230949d3fa705f4d355f8d74508b876e353ad40ef10" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="34ed30391c9794078064fef5c2b73c66fa2da3c23053f2be89e55fc578a568bb" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="855e5d5ecfa61bb4133e6432f6d1138697ba6e0b75fa771f5f151410695c2c0b" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="db55c70781fa8ad190c42b7d21f8c2549e84578fcc27558d65f80313fb535ab0" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="69d78d633c50d2b8e85adf6a1155300b516589da9fb861ea8bb14bed468bf293" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="4f642a058f4b655399f4f617500e99610e6958c16a9acd0597e7c5c91334fdcb" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="230aaf1257f3ccd097e361fa97d0410bd0c7a74cc2125b3a2c3e0fb96a3ab593" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="b13d4634576d532da1bf41a0c685ed5e9e2ca03f8a036d0760be5cee7e96fa88" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="9cb625172a6ff9d0468b826a3d65709a6d81842df3a586dd4ceac14632fc176b" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="6833e9bf3bc7481dd25ecc5b839b8ed043309afe0c964e496f21a98038967a84" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="a12385d87e301bf2eb50c5afb663a7a20699ece5d5ca4e70bdd0a339729dd4d5" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="9f9b237eee4f838bd92b42c8f997536f812d5c3414af384afbc5f4ac89678bcd" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="12ec4b32a4bd1a809072db7c8678a6a049f7c7b1a011e06a5f21d0534f47693f" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="e4767d0e2a1836d16fd4767e0ec6088a7de9f90b75309c6b8aa9a8cc13e7eff5" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="a204974ab119a87437b38eb14e0f1add5d4e1198ba3951e28f218947c91ecef9" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="18b1a3f3307f1a24f0138474c50b0309d87681575388874e366b3bd0b9788691" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="da74dc31667946a725a350f0635dd67ce1719a8cc3d226a85f60e67cb8d6e889" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="67c7201b8fb1a891604ac92798adda061ac181a186ccba6424bac8ebe3b0be3c" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="4589ded9b9a22e0b564f9c631273da61463a48a87138cbc05c9995f152c0698f" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="bc568c79861b7a68f08ab67dcc8031095f10a896e86267b060418b10ff2a4d23" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="f7d3f008864737e98cbf989d01306f5ce72dd5fec5c0445f2afbe73f52ee1aee" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="4eb58cddd376f459224cce2d01e6e7a81570975294986fa893bd60aa62fa0d0f" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="8e601782c079375ca0fe8d0fff74195f54b18d7f1ace4ea31d43150b8d2a8d49" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="142c908d8c953034728ab3af7eff4b9e3346eaf45df10aa9326acca74dca397b" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="60a01f6fd8bc3488429a004a3c38723cc9327a7d2052c6838a32d5bf4abe32f7" name="java-11-openjdk-static-libs-debug" arch="i686">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="0da871334342b969cc4bc34fe2e7d13037b2035254f917db6e66740c3cc04254" name="java-11-openjdk-static-libs-debug" arch="x86_64">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="0675984a87fde9d53475e2d950e3b2f66b089e2fcb8ba66eb6dd94b240a7993c" name="kbd" arch="i686">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="674cb2773625eb2a989ab2241d74a292d981856ea970e74934af37a678b842d7" name="kbd" arch="src">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="a58f5807a52ba67868edb66506b9d19ec87bfe0ef457abb92a2fd500da43a0be" name="kbd" arch="src">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="517ce47ac7bc7591ea9d79ce8883d02b7443be035bec2440820580a325bf5210" name="kbd" arch="x86_64">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="fc77865091d354766b3430f044c9ff2114ed44ec0dbe40fce5dd708615233504" name="kbd-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="6eb36a9571da650587bae64281e2261f69b17398b7776e0116613b9d3e6e711f" name="kbd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="cc6c22a18d9837f97dfb3639ae334da665e2c79e8f2a992f532382fe92b654d3" name="kbd-legacy" arch="noarch">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="0bdedd18dbd654fa755004e9b1d1136606acdf88ec79603b52599d78f1078743" name="kbd-legacy" arch="noarch">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="412c15b126aa847b35d0988575862113fc90953f788499ef64bfc7de2881054d" name="kbd-misc" arch="noarch">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="ef23abc3d39c3a6e6ed1e81fd98c2338917bc1c1ff9b1e388703d69b675e25b7" name="kbd-misc" arch="noarch">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="5b2890d82ff90a2cbe33d7114f4e9f0f9f675a1d04d0c23aa6b20cab7048df51" name="kcm_colors" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="44c0991030e85ad249793aa62b67ddfd4a1a4c43be6a22bcae131d4ca25f177c" name="kcm_colors" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="bcc5489593f6d07bc999cc558cbcb1aa33181f8f3e8c0933fd9445dc7bfd76ee" name="kde-style-oxygen" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="bd831b453bb121fbf27d5e76a1d6073ae423953e229760184c846623f360904e" name="kde-style-oxygen" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="caba10392f4cf6148f09e3880368ccbc514e5dab37ff0fd74fddf47aad9938ab" name="kde-workspace" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="9cb0e0c292b5a5d4758c36d8072945f67ee048069e37072882cfb2632b8e8424" name="kde-workspace" arch="src">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="9329f2827e3d993b33e1b89d1c76b23cd39065ee8bac913681f5f7a8c18e565f" name="kde-workspace" arch="src">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="b7ae8b51f853485ddce1bfa7115ec48dfc5956506d88986062159fc80ad439f7" name="kde-workspace" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="e27b51c5d4be171ad3ebe3679be4ac8f6aae98878d4f6df7cc3a17729d04fa67" name="kde-workspace-debuginfo" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="a793449204328837e0d0df6f7ce1fa6b291fac84ec2e61ffe894ae2fe4afb7a1" name="kde-workspace-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="edca9b8bf1aaf3f8797463d225d3e4dab41baaf7cfe3cf78eecd96683b5e2f80" name="kde-workspace-devel" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="d953deebe413c5a9fc55a9640007acb8d92f601a9289f015e37db09e08f9e346" name="kde-workspace-devel" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="78a22e71192c822367951a28872e7583e4a25979793df898dab52493f8bbe20c" name="kde-workspace-ksplash-themes" arch="noarch">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="94694134ea8ad24e391690c1f4dd14bb3f8cc2392eff2b12b3b51f6b0a77a689" name="kde-workspace-ksplash-themes" arch="noarch">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="c50012adab388470e3dbc507d062d2162ea4ad6274fe8f03cccfd317ae6e8b9d" name="kde-workspace-libs" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="46a10e8d44dabad7ec8f5c53e7ec49446377d40c3810e93a7d2cd8c30bc96daf" name="kde-workspace-libs" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="5316bd20d7dfa55874a04e09346887f39f83abd2aa2c6551943ea60bbab9444c" name="kdeclassic-cursor-theme" arch="noarch">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="f680d0368186dc8bdc893c512708a70994389e0abe47009e818485f112a23067" name="kdeclassic-cursor-theme" arch="noarch">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="522f1868b1ed3fdbd1b1d0a7fabb23e028ae76b65412ee68e82bb34f4c645b71" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="58902ebdba807efb479b7deddefb807284bad62d904ae234cac9242bb5ae4263" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="1b24d60a1e6aedc68e051748bd68eb81db831efff221c65344ad1723357def66" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="c69ef53d264d00b623f868cb68fea50d8774a0317f1e00f3a401bd2de1385edd" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="74c78bc4711423ef111e1140d60efb4829267a6a60c9ec071836a75848b31208" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="0b14c1950ba1b09c7f2df40cec2da242e02b56080ff063250cd2ff1b6145aaf7" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="b0a00dedb7e545e8b5990b5374586e3125cb87e6101c848537c9f45d68972881" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="249e8d8b6b4af31b473782e95de5371cb5794b387f9a04f3fc1e6fd9f3cfa6b5" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="2c373949a5c7b4328d665cee1ef02b6f4efd46bc1f190ccfad5a5b6dc6af1ca6" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="0eda639e0bf8f926387ac3de71f446e0e04523dc3c443130641bfef39c51f7aa" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="f139d77d0743122cfba0093c94bdb728f983d75a0debcbd00a03560d5ad2ef52" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="78ddf9b6897cfa626d016ab711ff38160b910cfdca61786712ac41c87d3c0423" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="8db73f5079487815d8194c3dafc79f8676d43dcf9d9b2aec8f632fb63ed73065" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="3ee75cefbc8e2f08e7d19a856e716a6730d31a3ccc2454928114f9e76a6e4e9c" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="08a4c10eedac8a2a99a14d257ed11dea920f6ca939018603f2d51cc0151480b7" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="e1d634a9a6f0760a319b621affbd85c9629d58c8bb96fb9c47fa4837bde556cc" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="5ee768326f45c3a5288e4e3dcfe00bccc9564c2f3c52d6e38b69a45ee13db792" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="01f48d23699a782dc05f249df12965ff7ca8d77f15a9da2373f6671e02a0d0ba" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="6a9f10c1ff60b5cdb2415ed65e98a7feb4fcc1ec6d7bd78690ca881a2b74c09f" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="c0a33ef97c9f3c3b684f6443295580d66a898b99e5ad208692b4275ba442de7f" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="3175075c8f4a4f62a1519f1c82ac1e9bcbf26b3a3ac5c81dee0fe0bdcaebc2bd" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="3e6ba0a2518dd22d63e330f4096b0eab1775cdcc11f1885d3b73103e1a5ddb5f" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="cfc55b89d2d69366c4bf62a286cbb364b4c157a0624fc688f7bee9d2a80ed70a" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="c82f3d68409cc419bd1d72d1c2073666244034850267c82795ff54c606ebbaf1" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="296f36e5eadf0df90a5e6a3eb63752011f6a51cf351778ad39334be8e8a164df" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="16fa890faab6b291a7997b5830c9a469228d2c807aa98371b961d65f1eb71ff1" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="bd5a644d1aaafaefac20189c2d7abe08974250e889b2e3ea1397d517909bbc3a" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="487b542bd22c74dd8020419c47e93965b583d75872c15b7a4ea96d04c9a1d148" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="fa0650cdad6b857b11fc1405b83f6025a122ff081fe43c6c465092207e30625b" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="a2b7eb245c43670352a9420a2550691f3fcbb8b940c62c43005eb7c14b309a49" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="cddcbee64a080a33f67822a6364639f319e4563508984292f4fc22a9e0dba83b" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="adc2a32804a4ede48f0af1dc36d529275305652bb6d2b9caa7a7d45ac02b2e34" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="3e3d87e1aad28ba5b1e23c3e52b63e91832971a9de64f44b4dd4d5a883f8a2d9" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="788af3daef5624b9a39f6ceaf34c01d014db95f41180c18e960fbe65ac6112a9" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="c9dc9037146830834a1c2b257654e87be7c38fd1c4a9059d4943732e7c3c9d9f" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="4ae834020e05bf038ee3bc05f230d8a6ec68691d804a8fb6cab8bc4194a18bb6" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="f69c1bc40af7fe1fc4964111ad7fec12f39b169d8e99d86548827b6e03c6351c" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="00911f5b95ac0f9c657d20e4397882a5a1a6657074eda8bf73f986ec9c7f2a49" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="5d39454c8fa5326fd181baa8b58919fc708484482be3da26c1844436e1a64907" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="f7c06aa5914b0bc3dd973145def8e26bb73897ed9e4fea89fab0782b5e483703" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="288c6c65023579a5e438fe2adcdb8014b81c85083fa26b450e8c0dab4f9ca950" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="0f3afad1055ef6d481e939446197d20c094c0e634716aed478a98e9e01e562df" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="99b26471ed2fe16e5fcb29db6c08735d59c5e03bd4f0bf13abd83371d7d74ec4" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="27b1d06273ea0e1eb480c7fa955241ede5e5cee7ad8fd04cc4ae1453dbb1262d" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="9656ed533cd610a60547cbba078e77ac144674446b986d68edcef69371f954d5" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="a1525e7a80a41566b31b19a9bad1e17269c29249ba611a4aa5df4187f5976217" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="d36e37ad4544db1e14da94000304fa8d93e960b2b5938ac2888e857b2ac84285" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="77668b0b2391788912faa270054fa815f847cd9958f7b37a30a59d9924c4d480" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="86f9d4b2dc613cfe90370304e9412a4e5b4111315ffa3555c410cb8caa35cca1" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="742f0eab1c6d8e3d960059d848b178337befac599b16bd5c38da8c12e0461f44" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="23701a643afd2b7dffb8385f01d606a440cf49524ca4c48b1eb870e941ded487" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="4b163d20ab4ea6d21eb1039c156258097477bce1e5e696b139bc5ed2c6820fdc" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="c38c89f3725205d0a345cb52d6578de3e3ed0efe7ccfed78ba0ee3f41b11a2d7" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="711d92dd664b33726917eecfcca21d61753b13188a273dca48c4a47e7eb0c587" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="9910af218b2bd6b977e9849d3e0cecde60f1ad341ef0737988c6fafc6fd9db8e" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="edcb238759bab8da968414bbaabd29bef8d64957caae4ea386c93ba740425731" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="103c670a79b7f14c4596e46ba8ea100c0e88a1d7452a2c11480d6dfc42853372" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="2ab6e4dc28fc67bc974ff6608e68c8b12d7122b3abced840540983fac8d8adf8" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="0d0ed05ac9880900fb86a98a7e23ea1f673346e45e2fe90e0ee3b12be42ddacc" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="321ff9277ae13e2d2523501b575a2d6a0ac37ed3f79e5d8f5261f773c0416652" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7187e2e77d9b5c0bd6c767386b4563f8da1c32755de0bf29d086ca19a3b72822" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="c8370083f1becc3f4c7eab5ed8f40da27f050463352d2525e6ad7137420408be" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="17ac8c0de7517d819d8c5dbfaf949717c69d7c774a613557b5971011365fea0b" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="5587b65e1ed5fd18539feb6eda42f4fdabaf5349ae9fef0f18cf133bdc2f65cb" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="5281e50c7afeae08f0cd10f10c864d8aaadc78e05a13382244e1d05701d134e7" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="c0e1b6f2302329c706c4d3b182c68410e67581b65c7626b3a6eb98eb6a631534" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="8949de62e7195c64291a6999939d6b8114c99adca046c240edc35b512968752d" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="7a3655a3f90b5ba8d4375080dfd8b209b27733e03303b9ecf69e8a5802138ce6" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="ad8d6c4bd9dcb2ecf09c42c18772dd463ec1c7c4bdabe25ef2413b5a2c0c3ce0" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="b36ec498abb234664ae10d773272d518a1b712734f3ead22fd6eee363a73bd93" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="8ca09fdb5c4e3eb7f7929aa13c9e3d608359e4ea1d5f23e368ed83243ecbdc48" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="b0a3a1d0a8e219836ce767e596ade829c5a524dcd689da02cf030ae7537858be" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="a541b9039268030db6d05b6f0e78d39863b67099cb9ee2ca81bf6c76e7746dd5" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="16fb4d656728e3f580045163edd44bbc80bc37585b277eb47d43acbef94084a7" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="904f69c8859097e93891042c4078248818a5336a7254790c011296e8f77aed53" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="831a518f13d12e0dc2e316020cc079a3bb54d22d23916aa282e848f5ce98d3e2" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="d3c0e9a4b4a1a335ef365e4690295bd6679ed797ab57f2fe5744f0f68a0ca721" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="9e10b4471e78a8c422316f0c25588cbc87502334dfb077a82a2f5383c90b7dc2" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="c0b9f4f33b3fdf2f770f2a95c45e9954f08bc7692329b33eb37ddf7425f04da4" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="18127edbf7719450fa2068060fb20050b3985d692b4025d346ef6d8e7c2c2567" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="c8a846e3fd6daff267d8ae7d9380116f139cfe6a6c5ada236fd283835fac3595" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="f04ec3daec3ce71a62974d30fa07b211ca39447526aa518db436f7e27f074be9" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="b60022132bf9a85e7f91a7604a13ca150bb867617d08ea8c22bcdec17f3b792e" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="1796d7c8e8800f495bfd9039a58d10107d6aa6a8b7c2c063e44a1b09cd9d31f7" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="094d35fd30c0acff8310427a81a3fc30d789fc1ad4d53c934f7c25175f09b078" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="98613fd373e128a767b96f579eb61b3960ca2a3d6cec54f4634ecbc8a0d78910" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="1ec8feba7cf0d32e1da90a1a9b9ace9e16040812214226eb755f4c3e6b2ce55f" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="3daed7f9d780df37be4f51aefa7eb328527550efc0728d545d0bd7dba809fa8a" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="f5f6648c154085d1ce7e84e716ece0d0a913402a2ac50693a8a11bc7a4825e7d" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="72efeaf11d7b7a57353f3b56cfa3c3c832b60c6cc64809781f95aa986bb4be86" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="cecb66c7024c162b2813be42facfe5df436cb7d2310858c63066103ec05ac634" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="e0280fb8787f17dfe233cf0552a01c8d8b801b5240bb78b34b8218a56e1d014b" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="c6dbdaa5c675460a291dd75e47dc6d2703e3757fd3ab2f31628e125d3e6f51bc" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="907e123fbae0c7671754c786f2de7a6a01d66a565e250622f5210b47569ef35b" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="aa59bd3c76c5592548054907f11dd0ca58b3f3ae68989053e61b96df015115b3" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="c9cc7b4aa3bc92fabcb23792cccd840ba922c5a146404bf60c756f631f4d9a04" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="d86c959873a8dc4b49a5b9aec13cb3767a9e1f1382a19f6f468faa9aac17b326" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="ea2ce44d8211fa65bb3a3926e7ac569485cba2f73216c92e8dff6d62a881a856" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="a6d3f84e0ac7c4dfd7d8b08221d50a0fc70282fc21e0f95bab869ae10951c136" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="90b5db149b9b0f4e295d8563a10c1cc13db73b4444fdf6eba43505ce2ccf9782" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="3eda973dc79628e519585392414fa7fcccd6dc788de8b0773b7043cbd2ab43ea" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="f09fa58e6064f2e905db7d5563280c57455c19632d12cba85476628a4e2622b8" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="7df709d3e394c30b4f80415fd00282acb0cfa659769018d871761eb5540f9fe5" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="8c0e7b1f38a190745790a739d5629ff9adef9fbd5dead12d5d0245c899f71a49" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="2aaf5661be8d9ebc7c8b44764b5ff5a8b78bfe99a2cd51536ea5dc98efe73d0a" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="e84c5400681f1908bd8e4abe91d18916d15cda4499ee739b30b4ac4179826a55" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="29ec8b0dda9591aad169d1399d37c334b2576a75b89ead574b15435b29a4073e" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="344517e0df709a107a2d0f942e1f45f86fd85633d61c534e51aeae75a99bfd1e" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="631cc464b6491dcf0cf62253f79ff13114a4f2c31fea7c82e89cfbd37e9e72fd" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="81737643ae21e6bfbbe16fff94fe3e8cdc3ffc3af3bf58c66a57dd47a8b216b7" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="e6ccff62040037eb8f1d94cf8d97f8defc870e79c240689216eab287ed3ef816" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="4ad36a5f5c680f99f5eacdb45e902bbfcb28c6ec29f12b1e9fe62ee5c1cce927" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="55a68e0c8091737b23026682bc6619495e1e83b003e152c352b096e9b40a1a50" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="a9d63a0be9b318f95f1ca3482e767155d6db0ef5ab0c60eb59eb2c9308139f51" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="7f1976d74ddd030a6a91e700999f8b152e4468b60a4c7915ca43a600074e9ae4" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="552b507b38d538e3dfd9728a8e8b91047ec7a2903fcbbe1f7bfa2e94c0c31de5" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="213d921a67970efbf87d1cfdab76c4b332f07a0b8743b506836c89e62783915d" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="556d19cc3113130ca02630f2dabb271c10bee20476983daf530463220833cb34" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="88115996779e6ece7f7bef6a5ab5310489badb1eb19aea175312490437b8e3fc" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="00be8caa43264d7a88938f3aa36b28102eb5f69f83ea09967743e62426278fcc" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="764deac7db78ec647ec6490cc211a2c410c983f56aa7e4491219f92a09855a66" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="cb4526dda7386a2cb1f79488cc849cba8fa7c747ba2dbe78f50f864aaf187ba3" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="4ac35a5c6e3961f7ae943905ebb19667d18de7cb18ab1d7181b8bf78c0765abc" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="a5a6117d69f3ab07e97cef8b2f39543c59e77ffab2367329ed610bb1a3204137" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="44d595281a719cdc8aac5badf59f1f07e1560aa94f656551f8f062b5f9662991" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="6652eba7eea7d874677e1382af7e709ba54df1a8726eb506d5629a54114ce888" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="1f73d4f3d34fb631686f739cad93f64b8c85b035e0c28779936fb902baaa6a60" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="445f9ed512c8fb5f4ce73a1f72cca820a877b47a34b737fa15c53159115aeb34" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="e349ee75b8efb3ee481a9e602e87ec721819f467a3aef8464debf0a943ef8fe5" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="c9c8ce8fd36ff169a30282a373f7ed3ff22f6a6c3dec02dc9a5d8444920e1213" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="8e8318ed96cb7ef6f1b6511be4e73194ed24b200bec132e274a1d18f688833e3" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="3e8600892a2ac2b1d378434eeccac830a1422690b2d9c3deb5e8a7b527a367db" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="e9efd621af18e5f868323515b2b285469027c67416c1714db9099748a1203a11" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="051bc81fac6f1855c15f491e44d0ed7562efae53775eb89f275a64f6b09eede2" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="5e6a67e0ba9bd3b31a056eabe1697a6749d2ce20bb465f3bd1f14f511500c3c6" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="0d5419df86b8b0bfab66827ee0ce716e5a47816bb50ec362cc9cbe442bb9bbc6" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="b7b77f7f6fe7f002c47f5e111bc0b186702fb7924a7bdbe504154fe84c489a19" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="4c2b8669f98dd565d7dd336d48f860c674473aad39584e9672db656fc8408ad6" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="6ddc5c1e58029cac86734d12816ad260a9a0c4e4fb96189d9d3de671c3d2c712" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="e05cf971c36c9c7dbe1bd5b5c7a3083fafcd150c83ac9bdc0d9eef27fb169304" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="54e5d357d7b2274602a0ff5aab02a901618eceafa09a4d3446da64c8437f98ca" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="8172926a9734b7b70739a87196ae78974922560c030adcb1bd13abb5909b5f2d" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="3a92228d64e6bb235983190a29222154fade7bacc136cce78564692649cea3df" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="9465a31d6788e283d270925d17d85586c182d8ca83f376cda16de47f60ff2cb1" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="6121d69aaf54f4bf8ea07c33bac229d658aa5c9fe29bd83358720a877626859e" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="90c6b9c44b8d5a406697d96564cada210968bab933183ca30577ca189e437ac7" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="14092020f8346cedc4f1cc875ffa71b0295677e0d7f45f39cb5f99e2739f6f32" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="c5c46bfeb813bd7362c9a4a5240bfca7a9d9f6ca57e83609142db196e607f52f" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="3679698dfa90227b76195df8e8320639f4e5ad3a8468b966e56b769988ebae96" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="dfc837629e45112fd5f0b86be37bf1826d1c5b5c4e16f0f7976c0b417deb037f" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="420b8b74ac5cfc34c4fd1f9a54cfcd1d719ab51a68c0a97c6409341e925275d0" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="de4c00280428f76943885e5d2d129b54edd6a67cb8dc76e1188468f4bfe2ca55" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="a0359114815241283fff62e84f3df9834a6a5501f18b709e2285472e7102c8f3" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="5c78a70eee8f64ea1cec7151fce2161504006bea6dea1c09bfb0d6767f95dc2e" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="e5a62fb79f52e6fd469247d14904ad2ce642f0b1dfdb3746db361efecaacca5b" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="c46e5cda0cf5e7906c8bb7e387b877622f9e0873b7fcc5ba5993d249c3abba89" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="57c6159ee038ab1cbcdebef5248690fc42b6272b74d75129f59b37ff86d9b366" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="84588b26c8e95cb9c6fa4bdc7e2994812b0a7ab701ce8061b27618997bededed" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="b47344c8bb6fdfd9df14062a000e901d2b00d84e5f3e61047c1263bd73843ebd" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="25321be628263ae9959a315123c53360651f046555c76044edf0d35ab09c4230" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="3d4210c27052fbd9453b04d9f201cb035d113cece7c179e08726d7519174fd72" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="157c3c42097107a08af540b3f3113248e36d1bde10ff81c5d31596a9df2a26d0" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="e1588ff0d4d08363664d1c10a7c0f5c7c56876d220e349083ed8e87bd852f162" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="20e38f9b9ae32a93d9e265079f48e26c1ede82cd5c5b208fb13fe2fd0f24b2c2" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="4bbb0f719c067bc0660e7bc37b4e94a8f236248affc1688d7be134d540af652b" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="fcd539ab5ffa402547fd36fa93904f423d821c535cb9554bf6ec45b04130bea5" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="70b0f9fe73c4ce0fadd7255e8f743e73b1383207c67bc3e0731040fa0ecc1e2d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="af5a2f259ead98aef7843efcfef68b5eba40c249929a9b5300ae581540679edd" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="76aa5050057bf8288917cce324a1fbbab2a87a8d734e8ee42124d3e6ce5252ad" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="6f451397940308d0285477f64bcda6d026f51a1df367df295dd2006edd46e66a" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="627903dbd9a87e185ccc2467cc54b9a7e2a728fb5f8f7f1272c29df20967649a" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="07621f527e34263edce15eb98c53109084bc74bb404f423f5efd442320adac62" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="93e5b2c455477751f27e3a1d8ff95f7b0e8b86fabdfe54eb1d610eb2d52f76f6" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="89a53c4e0f8a8e93f0ee3db2c2e64008ba3a4b88af8b37cfd243d2ebeed724ff" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="b94df6307bb1958376828de80d04268c4c061f0253515964e7047e94172a9803" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="329db92e5ba7df3d8f87e86115799d95c4df2b8ac332ececc45446b54717d20b" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="227ea6a46bc018607588a1dc449548b5d57b3f1fedcde2e0d0a42063da360372" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="0283b2c4b46774a5020888d900c450ed4b51004fb13863271775a2aad41fd6ac" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="8ae47ae7bb30c5d10e50b9efdc4796286478420a87f94a9d31cbcc246f06752d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="8a388a8d8fbb626272f08ff7fee23c22401559e157e3cf9647315f7420821370" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="fd32bf27fbf76bab9183b66ac036bd4c59946a6819334bd68de03ffa0e620e0d" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="1304289200ffefaab309e199fccc06d2f64042b44cc9c39bcd95638bf02429fd" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="6469f9a8b64d1f6627b830765f6267724a113d77cb8da0a426e95256e9396f20" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="5e50a50898a2f6fef71a642db51ece5bd33a70ed642d0b959f53ab806773fcbb" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="3d1baefbfd13180fb84c1945fed3edfc4f68be744b85bebe932bc0f21010326a" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="5aa55267e54bdfbf4df7e8e75f7e4019d84370c1841c2927d09c028bbb68ce94" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="ec3653aaf24fcd8c909a79840688e250776fc98d027c31192303cc93e5046e84" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="67d692d31093cec702c64e156f6be92a1b2c08bacb28c02fefc60bd66f68403d" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="2c84555de80331608e336362bb3d8851bfea92390392e563d8ed3e2363d234bc" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="00e7f0c9154131f839ebc3f327466cf395000358683d80e5a69f4caa1e5f15e5" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="518e326202186b5b0901e838b2a5366882e83ee17c57c5c76ff807ac2213eb03" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="731b2954709c2e37068438d499b7a9505e71f3695e997f0e9597296789646978" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="4ea7af9a0f0ea91cbb094510a9655850ef179d889cee837448cac6c01178279b" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="b3c81507878da3b9ef83fe2e0f8f9585ad47a305373c228ef762575197d6213a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="9222e22219a8fb2b340c3d5abcd08eda0e66d3ec2fea8b207b9db35aff53e728" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="4d981fdf9883477dd0ad54c2cab1f3f97c28610514355cf742849749963f0ab3" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="5162b7282c407bfad30b7f6aaed58e65c373f994c4e6fd8b3043c3a90c3c055e" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="02852d30deae35c10a9b0ee0b386fc6b16036d75143d60450f75fda4d7d0df22" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="c1058c8d1ec4e4484c2977e2b37b9b87b0b743764c9e48b0ae037f5f14442650" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="0c0f3cfcdb0055128c5d42dcdad9a5fa1776e291b22743a1bd1cdb512756374f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="2e197bfc007221b2010f2b998b14f7f5b07d27088ea251f781d74fdc6437a87e" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="48e8799957573f1830b2ff73f840474a2f6416f7678bdf2eb980a3d019a031e9" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="bf1d12ddc7c3d78b86927d0ebda3241af727a2f23160a9db883f3c0cecd65d6a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="131c16d921aeeb8e594083aa24ac9b8bd0ebed71180a6e1b4aae88f0c7c515d7" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="0dc5c22effc9e0a2ad0ec608101612dc7200559485f3a76c68f484b48a97018a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="01a6afb85054a1005c278c0acd32d42f02ae6924ccf59bff4eb40ace247b0d68" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="14b84d37140b90f4e205fc165dceb49878b8187f64ac6fc09a11e5c0a3e4e8a1" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="633b33832b8022ceb35f8826a66d1c481b896a90f96bb12a8ff607f4f12a5812" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="31c13b2b84585ec8911015b1b1bfa1b7a20841363ff49d56247fb34df9534871" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="751d2a9498441c1beb01a5d646acf2161ea6470751635c09b0ac991fd7871eee" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="02dff1cbf824689498b01f52d508225d06e20efa52bf3762876a35b0a247e1a8" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="2440ddfcd70eeee267a3a3dfa46072c053f075fb9cdf04a4114a6b78a83262ef" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="f1f139bf19d8d2c294b2986f06136bc39b9d3bf470612e8f4db9bee8d7969da0" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="4ca927905dd6cdfb5eefc343920f59a50673a15dccdd40be514d981c79896ab7" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="d6e2bf7b195645f6230a3f6370ca33a44c163bee157bc13cfc0b5a8ba1c9bea0" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="ceb91e7286e4c018b6ba574ada1901cb1cd3c2b7ae3961e2a508443fd75e33a5" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="a3b7d6f0adcb1d05f4f26efc7384002512eb0829cbb1c9d9e75b3b8b17bade15" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="0513a44ea5183445ad11959e476e8c9ec220c7e2b9d04c334f96e9fd8fcb6753" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="88d463fa9b682611292f8f1e08b1b24f4eb96ace4339ec578f0d4b44679035ee" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="135f4d677120b0d7ab758d7773b5856c65c7ee8706927f93ef851b46b017ed76" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="077f1bb947bee287e99c2e8f59c5f0300eba85062c2ff932dc1081b85dc8c100" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="f995c0d82a2a991790581a8da74ccae62b0a7728e152c0e5b1703690222ed645" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="951e66a9744aae87add2fa3e0e022c96f8499ea9c576f6095e8a6d7436a89be4" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="befccc6e94819f8fa62adc12011523ea00247ca2ec209d2f4bc2d9aa5fcb5392" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="5bf71a3fc8aea8dd5998c0bcc38b2d3a1387f6c167b0bc4c81e195ca4dc70430" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7f2b0aa12deb2eba3158bea404d8abb743a8a5dada3d276b5e610019d8b27380" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="db9aac8d46df135a205c7ae5b23a041a1f80d1ad314274f5a867d78f67741035" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="d6f19a0028c4364c075369f812bb60987d0c5c05010c3812a2781ed86e348dd8" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="4f7b1afa08823cc11a5ead28216fbb76d8e85104264e23cb42e57edcf9022d24" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="623a7e13bf7b8e89d959a7d73972e7c817f046982d5741bc177654e612069482" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="21289dad8cf4e1880cda289cf7514179a4775b04003466b19b6bf73750fcb7b7" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="89795fdebb8cd0f309c08ff7bde1dc04602dad867d40100e2ec04a44864f1242" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="4c1fbbc710bf255388ddec6da32b0fe80d9b22ff3af24760401c82dba99432e2" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="97fa6d0c8f3b282e69618998c64bc39a2cf59c167d3acb480a7d09bcf5665246" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="a924519c6ec3d4d4355beb7b80b089c8125ab8d09face7452440240895e74125" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="420b7621848adee913948043e9a977282f66965bf1c9460d98924f823c305f7c" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="e4a69c75cb5eab0cbda6a12a756e6422aad058ab4fb87b03628048b7fc9ce940" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="d0ea06e0d16d3a822171546fa0c222e5187a04b9b913788f63b0fc6169e1757d" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="8404ccb7178d2773a19b8ffc4880dc7cf1518c0dd043e73186f2ec5ae9a879f4" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="763ecb94d0845698f986f9907c86f0f4fb14d047bb26d5933aaf225118904b39" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="e3e61b2e9d02514692162d622a6e10cbd7f8b7972c635652b8b8a7b8e281880a" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="fe20fa0e7a34d4cfde896923969035b41b15e1bab7afa9cfba225a04bbc4c3fc" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="43edddde1d03bed6f900889ebb60ab3dcba069ce0aa4e7965634d9d3a8e99acd" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="ec8e6d118970b518da99b3212d6a1f39f6b3b6e612aa5f06e22d0e76544d6a29" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="4472183460049bf4015b44853ecd61828a9f6ddec257f8efa0898f434d97afc3" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="af42e380e828ecd2fdfccada617d38248f97ee3c4a1edae6bf81fc0fb443b475" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7bfc096c765469ce66df2b9215f1bc99c5930d049deb903e385a4c87786d4468" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="4e1d62806fb2c9824b60ddbe432e99da4a6bcff7ed447c51e4759d6aa7e962da" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="bbca1c9c2631edd758ce37e4dac04e9878611f713e53622887b48b139c485a6e" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="8fa0fc627ca2955d139c875f86d3805d2e569f7163b6d4b1b45fdef3fa2c5c53" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="aa9cbf4d6b40c2b9cd4664f1bc1220a8cc752c2cdfbc7a4b1cc66bd91dceb103" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="3a6ff4620604385465fbe256eeb77deb557e827b70db8f314cd30750b854bbc7" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="170dbaa6731d8a42b76903d4212722f7964a5e88916891f3aeb5b394736ba000" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="168c0a727b701c9ebb64c942e39c09467ae537d04e6c29223b476e31ebeeb6a3" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="b8796ad331fcc94bae47459f49ec433e4ee02e7d0702519ddd88d95f2bf4212d" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="528dd96b3315928a6d05efe1462cf3c8fa5d0c6672888f24f294ba43c1835377" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7f397c37dd72cdfe89d70c990e1f08e437cece1ff0ee5704a8d8bea5ac243213" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="1fa2d9b23a2465b1f4eebbf5339d81235d3474f2e0f6d62cad5d8b955bfdf387" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="d3d5dd4de8a9c8a3b380ff83af4a0ed7b4981c3c8b8465644dd288e5b0af75da" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="d33e2d25848c9424143136acf760069dab0d9f2cc321f434645d13f404b337d5" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="a439defefa7a63c94ec8739dbc1d0cca7b88a35371582a97b7b8e7112f135d93" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="adbb26e896e749cb65937898decbdc5e040b20f29ad7d0dd9bccbc7bbf49a232" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="46e4bc19ed4970e721353ec1b787244778e04e4b37faab7b88172c61174637bc" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="b14c9a5056dbac0200f40c0c7e97cc96dc4a17c92c468bd8799f39ca94c98f52" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="7aaa5e6c13592bf37d66b4f86b7ec0cbf0a8135f67fed0a710d3a83ec927f318" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="77b3b7cce0ae75d88da9b96a2e011f115ccd8dfaade01f4f99bafe18a9bee791" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="0fc3c0e302f56765cf7ac6c2dd8b0e3e4b018389a0d3afca1422729a2929140a" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="b31aeb97ab0e45a75b5bdbe486892b0a396e329b487f42b7d489a4ee5448f783" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="7ecd471505b51cdc21a035c9850d6750ef94f1ea526c256f19e3aa854df5856f" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="ed1d6a811faa2a49e672f6da9341cd3f8209d0ff0a42b60474d4feb8d243eb53" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="bf8b71580262649296c4d75281bc115c73af19e08ef5ed913d57c72436442ec8" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="9daa019189c651a41b2374353e4baaf888bafbb8c773de184ecea2dd8651be75" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="9085678a86fb7ec70bc464a58842ceef5e3f49b11cb97285c8ab5830cbd5b0ef" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="c0e4271e94a273c0580783b20b5a333f05a0b15d1e957261b1b31f172f890a55" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="aa7e27361e32b871d702c3f57e4e82937e9f46394398096258a36513781b6e75" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="12023f5c1bde44a593f786d08898f6fdbc2e930e18708b26165924fd469f6d19" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="67ef6c408c974882d708413ed5bca1ff0be029b0c5f0f00f981ec2571f659653" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="d895044b37540820e3f6401202763f5b174ff89373c602f287d15bb32108e0a0" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="16dd101c141df5e83133b0c6e02edacf593d791886807013dd64ce318a0cc177" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="d317e81a73bef647cb7d9465829ce754163a108bd90471bf3bbe3b8b2b24980b" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="d4c6119bc4631759a3af61067e3b27b2e99deb75608b35970ffc9d91a1a66176" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="4c5d827f27d7755b1c22031e60a3164dcd8d08f90a88cf158838adc58046a61a" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="31478d64d37280161338f0361024bf83678a469043cc22e9d908fae8b6f1f669" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="29ec5cbeb167a3aa122709a78c7591ecb9ee080df6e0c7b6ee57add6e252f503" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="5a2f29f2359d5abacf851a937ae6e31e04629fef956d8d4e227edc49a69dc702" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="252e1879f81a7fa1087301ec405478348e692889c9e3f466dc0fee6e65b815e0" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="2f0be83a9d480db9ccaf5ee0eb65d842d5d1c1d471fe701c9549edb18b5248da" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="ff8e502c767f4e716ceb05a11ca5216f21dd58c5fb588b61805a585e3bada967" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="0913227f33e1ce20eee9802f769e8f253ff702afd3f43e68cc189b5ce6a05564" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="12456196040771aa815c371f10049c0df264e20e8f7f456fd1003a0d95948f67" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="172cfa6c3a9e6ab82d5718b569d6a8af9848b117a13bbabc9d390626d05d38a3" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="9fbfe15115220ade2e0acbb0808479bfa9aa10f28aad63df137b68f960af739e" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="5ab1d687ef0175fbffe5f45b156d030e6e87d7a12bb459aab99f245d3c326caa" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="01808c79deec4827403f8dfd835509a6691477056489730dc3966e8bb7e86075" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="d35e98c028ef825665d95ba64eaadd5abfef7aa8271fad97746d7c315617e12e" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="009df2db8f512de9ed46c1d5d6a4797ce976eca087266d244518ccf8c39e7e24" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="a237de134dc628bf1088954817bfb28ffa86d65c57c27ed65a74f16c14691f08" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="84006df8a5644795a0915ec6278ebeda3a400ac582fe73a1ddf095ff439e68dc" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="e39996e80dbc4a07f9a9668480fc15442839dbbe7c5fcbfb6a7acf0da5e461db" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="65cf098a2c99c65ad3cc4480a70acbe74f72dfe53776403ad8a3c12ff38e028f" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="3d95c12f4b31bcc6652ce2d8fe20779f5d7752e23a9fd3f16778e7dd9da008d8" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="53d8a69062dd19bd1d27543b86902fae276720bca6024d8e250fa5ad65b2c7ed" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="51e20ee3503ff2b5724db7898f4fb92c6c5d64db109689edc1c5086a458433ce" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="82458a67cf448e384ceab038583d67cd17fa507270b17685a12a13e9da6d9967" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="fed1f4e69de934e6c64b428d47e4278e6086cbc19caeffff6ad5cd26f3daeee6" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="fc57fa7c69be360b43bc87a806dd3d2e72b840c570390e542ec043b618f75e71" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="c95b26ee76b3e642faf75bba1faaf61b1e259abcf9978d152d791bb511ffb1b9" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="d7e4436029fbcbbe51a32856630e870136a7e65600bef401f34a43cfb256514f" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="31dca90ce84ef279f219c634d1d7d14bd8fdca887d0350d7465c15bcb78fe73d" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="dff807562b0ccc5237c180411d08967a023f88b97b83a2fa08f37e242d53b12b" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="5e4f68900c41f5980db9bbecb873a818e1dcb5900cd376129810cba3187ff7d8" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="ef4b59af6cc3df722a361f7ca08f6f4e7283864ba5120185eafff657b5e0156d" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="91afe0c1ae45f8acbb3dc9e0b661c6f8391924187bcdcaac27be6b42b9e25b0b" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="46cfaea39cd954b4e45e225ce276333cc1b81d2ac74144a417b9d0528b2d0555" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="1c29c248cd08851ab846e7693fff3d861342aa0d3868b2b313edc2e90a01b8f5" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="9329d0237c668ebadad97d6cf8581f637bc6166269a1d237b40b027279687f1f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="fb3edf6df6e7deeaf5527b735cc65a8702f7cb0b8644efea06b61c771b6c4c64" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="6caa6069efacfdcd2613f24e1e24dd1148e1fd84e6a12262d4111abe85cd416c" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="bec44966497f90cea0964410a89e2ac1ca297fd0b62ad7c9ed1693f6b725be7e" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="24224531ca0f6274eb5156c79756f96aac74b0e8cdc6b90ebc3d43cb9e25f886" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="cf73477e35acc73d79ce99e02d2a201a7d3ce67b9e3935b19f4ba42c658f112e" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="59d96c5018d3f1097c99191249e8ec932105b505bd2efd169cdb6ded808b3d83" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="2c2c02ae8c25553933354992b0a6e5366ad6673eff5f07f61818144b2fab20db" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="9df6e815fe8f39549911c9547552514323832bbad9e8999bcc7882d074dc77eb" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="4be733c5b7f8f05ba60cc4489372d2e3727009f3eb60429914687ab919fdbcbb" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="c637192fc8ddd46bfdbb1f1850cca4a8f92eeca1cd0a4bb757323c8a1d461b1a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="c6e0b517913f8f7675248c2eb73e96a863f2bf6045215e88a54b86480f4a37c7" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="8a6ef850acd2affb6fa97b8e6cb79bfa47e21a7d91f5546f3b93ffdee8757540" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="d0fb94eabad28d84c7204156099575d8a9afbf3a77a796e0fbc4ca9a2688fb2f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="c329a5299096666533edfd1f3b85064154a102b63c40cd66cfe007d080c9cf90" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="152d80d4e73c329fb11a7ef379af13a78df9e7ac731c0921ac728138a466ac50" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="84fc665f32c16a5e3a1e6441cb8949db9e232a77cdb5ff42a2c9941cf3d0308b" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="d37935cf8db61989da69c2dbc28e6bba41205b968be5b488e9464bbefa8ce4e8" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="ec45933f2d5d2c63cfebb0b1479ebd0d43c7bbdfb84f8bd9a09b52ddb637b466" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="7f485f1ce93acf67aec76ad6ec9587beb65d0304e08e01bcbcb41046e223f774" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="1b9696cdc73dd551405a2e9883876e1596359547d74f2c10dd4be8701c95d9b9" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="fa6239a93a92acd0111d27f78f437880fffcedf9880fefffb130948ab3d45b56" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="b7cf9813b19b67f04e12473d51b89cfe8ca944fa2f70e6dbbb9e51f15e957754" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="35f0f682665ef5e7c3d04a7001a071fe4d2e1fa3d8468279705d2a96a9207864" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="a33afcc992978a936b738509a4eccda7f85b9db7f2d09e39de57fc7e20ed1fa7" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="284dc5f55189f2e3ce8ffc8fbddb64be4bf0804ea364319ac01358e5119ef9ea" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="9db031307de9cb7f1c1624d70e8de40cd5c7ea2eb3957c327ae4d9b8ef0c4cc6" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="83f99fca8ea2f192625a818a47e598fdb7fddfa1fa86b3ac693a5b2011226926" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="025125511f03d11751b6d0cf095ed37a8c2044bbed15941e4066343a3e7edcca" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="91fbc212f6d17edc4812be245266af328a8fc4559061fb4aa45cc94759315029" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="d2803bff24f3cb95ec53619df20fb93c2dc25af0a416db2816737b00145981c0" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="9f5d3d8f660503b2179d29a2910d7b0c2b5fd57dfe809b2e12777cf3974d7b84" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="ddb891e61405eb4a49400735e25bb044ef69c6574a005a23a43ac904bad16205" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="29922b23b0b0bcd363c7b4564c1438c8f23c5e30ef8900a29b07e191e340386f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="3af57d8e00951e4f207a4989f31a95a0e24e8a7ba2c3bd065c504bb9458b60de" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="a7084a540edf5fdf06b3ed8d9658ba95f1be8db4cdf397933a9af1ab162bceb0" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="3cf7662f5394fbe54eb85e06ad29b41f9a914d039cfaa0cb0d5ac50ef4f7c31d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="fa0f89fe2d04452ae77faae7a6b8c3ccf9615e12cb81249b0d8927d4ce7732ba" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="1cddb2b55d2d5ff478c5efc8712a7818ac7b5bd9d373c341a04f83e5a06de3a0" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="47321013250c47746a6e2a5c27b10a497ae79f848fc6a25afae4a2180a6c71ff" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="ecb6617febe19d754089c67ff4933ce339be060c05db375028894efb962c0873" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="0261b712a7041561b72c0cd97048c4966a540b4c53322d34dfa5bdd5548acff8" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="277d9fdf86e85df8155dfbfecec3bf6d48aa3ae0b77c9a86bb960e6df530a649" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="4d8d552682ba6109b8acdc94609998ce12b0ef0fff9488c355c0a6acbee755c2" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="9e0c6763ca20e90a21d56c69d1a8656250d12d719b72f27b5594f2f804973686" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="4e1246fc482c6aff291865afd214539742139b31bdcb34622288fca47d9d1647" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="cd223db1f47a0b74310226569233aa13110e74107983d3f82c23d9e3a747e375" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="c52e1cee4aa651606798f9c47ebbdafcc604b97c8cb565773da7f95414ff0337" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="05c251b2d998388eea9176a862a0c35016fe52bd5ad9fcccd112ab2ee31baa20" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="4f6b49beacb5c1a7b61773ca0b375c438028ad9f031e18d8af0667866d550b98" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="4b6b14566a070033d6209e5766b70a7f967cfacae29215fda04b7592e937363a" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="16a46a3f753cf54076b816e534f25eea911ffb08290db54a7f02dcac704e7649" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7449e7d5e18cd8959d4d8103e81689f1453f8068e2406279aef0ea8feca06bc8" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="82cd48f332f8299bd50b3e1ce99ec3543e5e684409dd947ec9433c9a6e1128d4" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7872a64c1284c1f5f67ebfb4cd6172e5f7e0a11b45149c4e7d42bb64f9173edc" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="2b2d7d3182e83580c3b2ab17a3d22307e7b111f7653d283dbcf9b759bb40d1aa" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="323cfb17181fe52cc023abaef98bbe1af6fd861a02821549daf249151b21ad9a" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="d837d2e3c91ee9036abcb557951a1b9c3888c2314e8499787016b07e8bcee453" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="e263099a99027766b678148f611921269f68a6b7edaf9d5ffdaa76be9a64d1cc" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="46de80681b7bca542f09dad5de2dd9ed97077c2b2283db3377858ffa7210b082" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="c3c9993951fc0b9a0816f9769b5694801b221ba09b2f1ed85df6d1c75f242cf4" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="40556723af5a4087a70bc329a23106f97dbc92920b0894b236e3e20e6412dff5" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="2985dffcfbd3d46f262126b4d05feb900c3c768ab5b2a24eb4e2772825d28283" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="5a033227eaa2b9a99c367074b7ed5cd74f75d9950d473effa501e3fce25389db" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="3ea2d3ab90edae741c8064de3639f707e4b234c1252975ef838d9cba916add50" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="b48da36a621d0b0318fd474b9772313aa5b0c66b08494f863053359b6f59ab5f" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="0c398ddc3120947bebd31008f022d08a72211addac889e64b53ad9825b09ca79" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="fe6bfb416d8a34c7c2f592ee234d12c75b7176e8cee26cdf41c035a0f4d30293" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="6d4baf76b81c11249cbb9b423d234adc8b930621d380d1eb7bb3ea9f0debc990" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="ac4c6074c959d5e4d524a32d18f088e289e4636f6cd3061b2fc57a6ed98918cf" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="4515d0bac210ff2fc5faa3c179de8c494214e9472bb158aff8c8a4aee42a4f52" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="7c3a27e67e969300908425017d30c95f198a94e3109c8a97249b3be5fbb7e362" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="e85c00d4d3747eb9e9f08030ac9a305610ce06395f8cfa8473bb18fd1e161c50" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="75f7644369113870ea482bcdb06d1c5eb12a374a025d7c0edf302f60f17a37a4" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="32670e1bd696391e80a483840bd719ce978b243d146fb8d95430cdf771659355" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="a6b331f903c2ce693deb4076517d14889e380fefcbc9a4b316c6870a1151a340" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="ed946a799c0b03e90b4b7c8f13fdb9a93ae83cca33e46454b704b943e18b7d09" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="3a03c3329eaf3cba4fba6875e093cbdfb67ced17fcf5a07d5a2205be26937d68" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="c025e7218473e5a28c3dfd1afafcdf8278b2f9c1eaed27114f1f82c315b2e60d" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="de3a0fab541073e9fd25091b77a09f664ce2d068a048e05977256fcac6452c77" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="75efab8787aa3799302ceb7cc53b2eb3d39711afd420be840b08c011fd8673db" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="b1878ef5cb884e6741807a298a766ec47b7bd959b9212bf03bb2708125e3b18c" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="635c1e2823586bdb47c225c872bdebe87d13c59d76d462de6474b0fa8a32d6fc" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="6ee4dab8b04fc0edbfde4262aee897377fd53d3a97968885a5a3887c697e665a" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="aee33e6c3c5da222cddbf6a6f496c147da9b5e841f31aa7d046b781760c08244" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="7783ad9bce8c4d06b207c450e40252d227e4609cba42b75270731937d8ae29fa" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="8aa1a6fcddae4f5e0c373c8c8d8ce7b3db20d287ec63679906f0a14e90a52487" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="0277ceee5de183795255d796191c4b8b7d1278d1f2149c4e8363fb00fc1e4fac" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="929a709dec0a9a382015fc202e82040e8ad6fa1aae3160004d5ffc8debc7f74b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="82c9a21f589b352765ad734c29eabca12065f8f29ddccbf0023e84afa2fbd950" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7495f9fce9f13db24ce9b4bd3b2e6976e7656a26731800815325bdef34ce948d" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="55498ee7cba209e3b1c926c2bb983b89017792b3cff6690c1a138463533260b5" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="6ad26f83a4ca947f87320851f35a110a60950104df95349fad7ad17250b238a9" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="a31b095a78faf5dcb2f9fecfc6f713e0d11c30ab20ef1d9175ce92212a1d4f62" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="59f1b654c8d6620c1e0aef53fe5f2dba429b05834158143c6273371b29cfe6c9" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="860809db8cff377bf14ed73c7068751d7f080fb061fa05d40c0d4340bfaff1b1" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="8fb02706016d94f9fa518dd1d96b7f47ff623d1cb2480200d7129c0b9ddff654" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="5cdb6b18d897b053bf8e188bdf58f0a54a8d709af634c78718ee4bb1a2dfb94c" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="0d8832e46367282468e2d2549265b25f821eab29f718c2e48708d8f608632f52" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="42a076a334ee7bd2d7713d464cfefabaf11a5630ee843d2e73a3b885d910bc6a" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="3a5471ea4e486d74fa464af4e96de1f4fd92547c0ad3a452af8d833ada0c41e7" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="9a27f60f1e0ffe275a099c076c93eca781bdd75aaf5520a58a0fb4d87f85b5df" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="773aa23d67894547cc415ae5e616e588f807e68aff7fc940c484a4511bc5ed24" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="f92b777864fa86f680bc5cb40e03aeec69f2ff4d51c8012fc250a29d62251d86" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="c91454380f39360c6088f34defdc2e5072e9c018bc2bd32f6b56faa615cd03e9" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="5cf342e5e4dcb57083337217f8b85a9e88266aca9fd2a1f859bea85b15b9c5f2" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="ed32900b33ed6102d317d02ef7ff0e7c5e17e1aa37811a9facd7fa173766fd33" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="ca95049f77ec4c52cf3d89c9296f1746ac45dd932d400a525802a811c5859459" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="aca0941f6f90033b4648909b6403c353aa3d634f624f81a80f82e0d87ba3b8d0" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="c62bbc7e4620d99ba45d85a9d51b920763487c1ed4f4c88326a7abc530261838" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="aa6e63345d5d772c5a71837ab06733b5b760ccb3c70a5db435998be9912d338c" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="77dbe82c29bd763c8157111fc30cfe4e36614d261d69e298a014568b6ec82bb8" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="26de36c1d12d6b326c05aeb23c29b6940697b72630a5339c946715d69f3a9209" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="56c54c2793a63848870db11c8dbab1a4b1199607bc6aa50f677072b314327f76" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="72d4002d5f02abf416a954296e530c62976bcf04fe2b6929348a094706e880a0" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="fcfba4447d0a6965124fef76cb6cfbdb06d15d220cb2e080c3de939240f8be5b" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="6060494683607e2d8c3e050d7f9cf0681512c634a0c3261b62b22ef3e9e393c5" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="7283f8380bb6fdcbd6fa0b015f30dd0e696111b3abc6a74d2882ea6e5251449e" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="4a842490aed7ba78205f67c7e4c941dda2404c04561348a8b1ef691b5dcfb1f9" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="abfc1a7131e5be72cb19d6a37a6d39a61f2de66d39d6f7ff0d879acc03201bfa" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="e7d08f1fdacf0440631a519a229d7d1d2b7efcb85718bbcda18a2a7ef948f80b" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="1c27513d4635996978c339de3b356e59c785b2862137a7765cb154543e4fb0bf" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="bec949704e79d81cbd61104b654f89eda376c6cbf5d1351194dc4dc41582589c" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="543918c9da169d808c2aa445886417b6e11156facb3b28d2a94d1929886c0c4a" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="8897f0721234cbcdeab9f9fbce10f1875cc972226ebf3599ecbcdd3a8bfd1435" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="bd8eb6e59c1d2f005e2eadee256ba74751a69fcaa41ca84aa03139c16730df6b" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="9244f6989c04cdfa3dd4b0830bc52d37cc895033c205a416874ef406fedad474" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="04655696f02a73b85222c3d2c2a44db881e6f52d6f9c9e60bfb9b6c03a67fabb" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="f76feb96e0cfc12900740c5ed1abbcf4d5236439905b5af082b1c14e5747c8e1" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="efde08e9e88af268d1430c9dab217a0f97a47bca3d31798ce63c6e417914a766" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="1f9e141d30f340b4f10d0769ba00b98ae71b0edbf3b3615d5108c540e6f43e99" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="b3918d385144f89c9053073d07a49925810431eb2843087b7caaff887a9add56" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="25369aa6503f96ced5ecbc95c122ba928a9c7f66cc8b9df994bcf3e4a15394dd" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="d5a8a72421c634ef7c050ed7f3907c35beebd644af7f309ce35debc9b4451566" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="1856b609629f532194654bd3a4f16423100d4a7f02ec538a85791067bed52d75" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="f51db5a9b63c9d7e876523b1b486fe586983fd8883778efd771c9fda6459141e" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="fad512379cb79bb206126f3d9ed771f817680913e6538d4cdb613fa79398566a" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="3a9ef1faefddd4bc4251b7432da065ab1af82d04f224dd89b177455bb8fca042" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="2a3e096a923e98d62d9806baf9f06019c6a1c38923f0be557d8a13f6795f8d91" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="1360309fcb7f128de834923868f847ae65c519e3132edb10e920d7f1a90a3402" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="f431f61c064e4285bc94a0b4f23236bd38634c4654e4d2caf068b8cb4804fc88" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="5084b226052badfbeacb0e469a77879c6c495692701b2bb2bc7c54d9685b3fbd" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="6bff879a62cee62fa3d66169167e78f8de4ad319d964444e30caf99cc50ebe3f" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="4ec3707bc349f52949cffd62641d6f4ab3608780e922e330d152895e9fb7f295" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="1b32167f3e0ed41ec04c2fc432cd18634eafa2df0294e13dfaff923a36fc70dc" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="f11f789117c10c6f4c102469826d63a9a1e94ee52b6c496882978bd71b4095c8" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="475be48e2d91116412dcc200017af4d3abc53ea5eb8a83fb2bc86e77b40fbc2b" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="c3f3f41377a0ff0d519c570b193919093862b62e7288f65729321bba9efa9592" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="a9540370e0ad8df2fb1d9d54c3f0d586701e86df6a31efa57c56440b0d4f1d5d" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="d426427c4ef6b2d141b598ce2d593cdfddf2d00fdd70bd6864b5e2957b82861b" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="8007d187aac5798b0f74d49878c56c30ac727615996fcfd9fb0ed1ef0f9cbe37" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="39d82933afcb0cf3d18433930934340c2d302d4064654a6c9c381b51b96acc0c" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="70442ed37ce04597da96251d293cd0a7aa08feaafced75cfa91f4facd6a0bc75" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="84ff819d5a40135667d475f909c95190a2f3709100a246b17c62bff514c955a5" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="d3f62e91a00cd0ea3950e05330ba2f13b31360d276e2cd87502c746153e39d13" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="fe8d95f411e090327d906cb98b0aa160d250fd485b0b540ade8fd8829cbca9a5" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="9bbe40230d02b3b8d0be97cce9e470dc4fd3f84cb8b3c709861687938d61330a" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="b33fbde37729290941935dcd95098c72a1b1ca46498affb7a9e25aebe8164132" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="cfedc872f77183ac2edb99ac14d923ef6641161c9e51a45316e411a8e4adcd8e" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="b5c184c614e03eaf7b6f532f1effd081114a344ca8fba1cd62d2aa0e0a38a6fc" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="90a496813b2af7a880c32a74c60be9be5155a3929458a57873e429929ca25bb2" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="996c1826fc2d3cb73dcdb45daf40422921cf085a8371e36ec0cef2381ff7a42c" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="649a4224caef5258bd407d1f7af1438f5757525e3549dc672c86e2b184bdada5" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="c3884ae5a60330abdc7c39bb9f19bd36dd9be883bdac3128125a9c1af89fc7c6" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="95ba495bc168655d217f173684560b744ab4cb373f9dc6c23c1d252e4bf2c8b6" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="e1d247d8ace4bb31e8582159ad142617e77a8e2bf75ccc372b358b6fd90eb187" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="09659cc598772f881ca3f2a68714a327b80e9503ca6eab1156dce4239786f9dd" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="0626f4c6d5ba8f4ff0560956daa90bea15661751cbd55fc14313c74fa45e7381" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="35cd924a3dd57c921fcf22b1d03921d2410701b61f994a720b5c62f4cae7e89c" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="9fdaa56cf6fa8ebffc0fe318fd77b9861ba4a0c8e17ed9f19f1b3418b74eeb6a" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="18cb487f0149cc79dd77c8c737d637087d7cbdf9512bda01559210e8b5b48482" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="6d3a94de1539d15e4f8ed3d2a96bc9b1e12d707f1d4fc3066e9ccb6a22e5089e" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="e9c9ec15940bd11abaa89f59d67d5391d75b3573ade1ef2651ffffaf623bdd6d" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="78ef88d9c57f6d18dbcda08c1611af9b12c53a146c79aae2ead797331f5f8fbc" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="5c042de23b053f9a434aac16bd237088b70846f55580431dbf7e68a116ea4a53" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="927381aee681cf9caf7a20ac4973b748bd69dfc44e1cf50cd6a48573761e0e31" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="b57f1656ac59a45ee61fa2439bae0c3643ac3104dd3233035d4cfe63463fbaae" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="8bd6ed5ca8182da061b6b9464be3d1fd00af170570fac807abcb66e98b5c672e" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="c438c9dcb200ab45b2f3cb61397bc7e4f0212996e2bf51977c8fe3e2f8bc0e1f" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="5c4f0e0bb65d94400999c420e4ab6921e34525bf5ce44ac332c527acb6196171" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="179ea19e833a6ba37698351630daa06546db2c7bf5da3162135b9e16291b1061" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="2b6dbb10c4bf0f5ae723ceb7a3a88985655f47fe2a9f8646fc18667605a8b812" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="697c3b56e723ac7bb4a0a1226bc3cb07b3752348c339fd3a3f0f0344b6acc6f4" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="ccc3480dbe7f3e3272adb40aa593cee49935e9da17dea39281429538ac863f01" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="73ef4002e7b4946d5665c4ae56814463149da376ef7baac7eaa9f833c008f64e" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="feb347d9f109f2829a05bdd649799acca95f2fcd4a2f9abcde8ed7981d8398c8" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="0dc2992edf1dbe8cdac176277849d78f4bb453a71381f55edbf198c5663445f3" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="259a00df4ac0a13cbd4a07410c965289ae41b31e00bae50b04fed79f68d407f6" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="5467c68ce76c946acc3f7207b2c3390f753d33e840240a9e28fff985e1c8f0b1" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="745e8beaadc57d343a5fc8d6f0c24e4ca959ae5e41dd67b2e7b72580f953c9a0" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="bccc1c8e51072a83c78ffc076d881b01a85ee1e8418cb21b1731e07962c3b19e" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="addb1d4fb3ee54b9f5dab8212fb25d7969d23609da48e81cc6e25ff6aa7e9f72" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="58a64226f04f6abe1e61cb210bb6c522c779243dab48a86805a352061167bf1b" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="1e90897f3036a22b13a69f71b06e8ea8ea5adc9cc32a110691ffb6fe237ac03a" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="a23894636e96e4c1d50271322ba9be8aa6cafe0239d96af3ecb4603d8b90cdbf" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="5af75a55346f8cd3f26f20dc51cd61d864a8c12e67f197d8badc2bdb30d5da0a" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="4278c4bbaaca123b43c360f157a4e8f4d1ef0904d2b075e27d2d4414629e43c6" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="43f27aced18b005544ddcef0e27d7fea6331184412ad7a16d676a3443648de38" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="04a30fafce6ba6d5aebf6668e6b237dd4a9464d7dcef3af090e88056346db735" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="f2cdf7ae9cf58665bc031eff590cef07ef44de2edb144e49c5210fd0d52cef27" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="3fb6e777c04a8c768097cdc8facad90dd8a5c7b4bcc9f87fdd3ca807b4f34ebb" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="818c7b317d0b6cfedd31b325a2e5faebb100158940da2ab66cd09feb7f272a7b" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="1b72e75c7df7735ae63cdc8cdfe8efa5edb572e47c51adc17917bfa294f26396" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="9e836e71ad5b64c88ce5f7279f9561ea35f7c2a94be018d0b426b4c3d3ceb712" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="2c88889f153e5466053068492957dceb37b9540c554ef7dbc984c6d3d74d0971" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="1b523eb9f32eb5067b386c8874db5ae408a7c55cf24f861d7a0edbed2933e9fb" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="db4ba1f457fcee5dc4392630fec7444c2206ab99f27c75c79f8869ce2f23a442" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="3567436f248dc668e07d0cd00937e5eff095c4bf5b91b2a1fa7813daebfaa478" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="3aa5556bbc9fa5708bc95d0d07c1425edeac72a2509069b9b2011524d85ab792" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="03d4179cec4bd97856ddb9b0a9a28b355d96d9e42adfe91ec4b5cde0294f29ba" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="42d51adb9cdde7fc490c1a6726c459c588edfe594250be18f7a976a683af0140" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="0b8bfdd65e7c4cf0744d41f768de768b4a8121ff28cdd0994b53cc5ae3f247b6" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="6a3d40296b93b92ed7e2f2e841c9dee86ac1dee9166887f84c7cb66f7f709c05" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="d670247b6bddc6f1bd8caeeb055f95f01b921ff33ddc4c4910f49c82b7714f06" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="f3b786d1b897f1c1e5f96119d63b1efbd02f6ac0de6680fb4ca3891b24d951a0" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="ca7cc388891e031eedad32cbbc61ce2fe9bc8df3080791837425e9ed68952e0b" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="eccf3f46f7e455310e6d40e4d5947907a645452dd26f2cdedc1448008b8c6e9a" name="kexec-tools" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="47e0a58d5ec80ec6d831a8631b22a86e559316efcf4d652dadfedfe3c6fe5ede" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="5e79bdf2bbee15533a2d2124f9fc6092533c19f9cbd82e8144b3f6941d8affd5" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="6d5bde8856eb20095d960554efac7edd62c606d73a994e51d874ccfb56bca703" name="kexec-tools" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="0e8ee8d12158453197b228aebcf42806605592aee62f5ec9d4f089c7510e4c31" name="kexec-tools" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="a544d73139bcc48a87e3c353c958b9c6e484ae6d34ff5935cc2d0193f7ea2048" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="2ea2d0df735888f294cd67e914d36666c22cae18f69314285036d187d59bed79" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="4175cf3294f945336d6cad933aff9f4ada4e7e75d27d595851e5acc7a4433b81" name="kexec-tools" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="e32060027f79a68ff40f580113648edb52a3199c3ab40def1ecce299d75dc42e" name="kexec-tools" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="42723e4ae8f3e682c0c13b6f29483dd7c57a07fcea12ff6762476e896e70320e" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="23d12a9ba614839bb802111159a98750d622d37cb890ba87463735d7b3ce2b32" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="9792dd7c2209f274f4660f5d152dfbf8aed54d03662f30d4fc87fbefcab1e870" name="kexec-tools" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="d3ee84f03b0b133e28a3d305de4b25f2d0009155b1b39a96a8dd08d40f5d5fcd" name="kexec-tools-anaconda-addon" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="00f7d50ff548f66b7ee7407095e8ac88e2c89248cd7fe6193fbfeb5088ad7b9e" name="kexec-tools-anaconda-addon" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="97620e2643525a8bb31159c4e186440a7a826c2b49d46963ae6d98edcc7e5fbd" name="kexec-tools-anaconda-addon" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="502b2c7909c557d78728f4889a98d56321afac4ef07b8b24786e3d00051d34c8" name="kexec-tools-anaconda-addon" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="1b60fa971af82fed9740dc6904915e724bb4e384d0026cc9501a7d35d5a0ebf2" name="kexec-tools-anaconda-addon" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="3f4eb6f48e8794751ad5957731df228a7d1dfadd986929e6650d5690b089cf58" name="kexec-tools-anaconda-addon" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="21096e9425e1265bd4a2bb106bd3f1685f9a01876284f08f3d91c9ad8d57bdc9" name="kexec-tools-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="11e21149eb3af7d55915c90c9297a1f8f0699265f589aef3c28c342bd66eeb2d" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="3a20b083fe03091cf690a9f781609f05fea37ffcfcbf8f904ba9bcf0e918e56d" name="kexec-tools-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="5ef55dcef55934f09d2b5aa09ed5ed12debd66c50bdab914ff0f5996a07d55bb" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="4a015c6dfb31b3555044bb76dbe18d0cb050e55928267b3f9e8a4f5fd502362c" name="kexec-tools-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="8062cf3b155faa8061841a9b5a8c69841b387b3e62fbbf5805885d4ccb78c146" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="7b86c8b5c43b49f0529f1c58a663fc149f08a2c9d1437eb07072b82377fec93a" name="kexec-tools-eppic" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="90861a050b006371fcfd5b50c9f9e23f00778051532d6496126ac929092593c6" name="kexec-tools-eppic" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="a666e48198524a33599150a64cfaa9cd947a5e576883948d31340694fb876754" name="kexec-tools-eppic" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="c170a0787546ede26aa2a83be60893ceb9b9e9b0172a4e11e353a82ba9e25ce5" name="kexec-tools-eppic" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="7c31210790ab0559af9f3feaedf126d54ce56af0e8e749e4c9aedc509ca9c19d" name="kexec-tools-eppic" arch="i686">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="8cebcf02fbca6c2d8ad17ce655ec53454ffc8a3e21b73aed0705b7d24854e090" name="kexec-tools-eppic" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="c16e47c97e2b4fbed40bbdf64376664bf4d5444d5e8654f7adb7c4d7f3378c37" name="kgreeter-plugins" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="ce9f929057bec23ef541724a914182b9cb90921d68b66bafbf230f126a454c7e" name="kgreeter-plugins" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="86cc2bd0311719d61933eb20d60a2f868ab4cdbf95aae18cb96afefb574d211c" name="khotkeys" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="2c89e6fe725a761cab0584920d0328c2ec7cf7eafd3c5129246064c089dfa18b" name="khotkeys" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="b096faf4b2005b2a00517776ad601b299d52d6bcd2c55d4cfa28680f36f58712" name="khotkeys-libs" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="6b5fa967bfc1ea79e1272268ec94d43f7da964efb5f254e2c86fd74b6c12ec5c" name="khotkeys-libs" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="b0214c3288de578de978da3b7a393a5ff68a1673507e9a4c6d9b5d86d6014ca4" name="kinfocenter" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="4cce1c5684c29a807dbc74b89faff13f51006d47df6d53b275f38fa843c969ef" name="kinfocenter" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="91f7da9ef820360b8282903b39a66635aa99a179e8ece15d6c5c4895a70788f8" name="kmenuedit" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="7cc8320dbc8f92aaa4764710f96e69f2c292a59e5c2ccbda3d1ef85a470e24c3" name="kmenuedit" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="427185612881f08dee7d31451d86f7a8d2eb73718dda3454e573cc769d76a0ca" name="kpartx" arch="i686">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="f83cf7893a1ad398c3eb900ada0aef46afd47a63138c805db666fd301b061e9e" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="00c4bb144eb7e5b41643efc37dd758f13794b426b665bc8fe653c25ae61d60f2" name="kpartx" arch="i686">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="38534ecff4f68ecc5842a3c8ac5096fc8b893f454eb948cd8ac7d2689febe88b" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="8c366200e7595219a64bfa20d32f9210813c44c00b2e8f58dd1bab1fed510384" name="kpartx" arch="i686">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="718ebbc47e8913fc2f2210834e7739b78cd5f12a0a40aa9dea44d2095d9081e2" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="26fef51a4df82e7772c390885190b6d0197f919fb26cd2172afbe633ec2ea397" name="kpatch-patch-3_10_0-1160_11_1" arch="src">
  <version epoch="0" ver="0" rel="0.el7"/>
  <changelog author="Yannick Cote &lt;ycote@redhat.com&gt; [0-0.el7]" date="1606910400">- An empty patch to subscribe to kpatch stream for kernel-3.10.0-1160.11.1.el7 [1903664]</changelog>
</package>
<package pkgid="7d0654f2585d8e2b0f0acfd99c6646e259115f66a5843ab130d0f9ea15ec1dfa" name="kpatch-patch-3_10_0-1160_11_1" arch="x86_64">
  <version epoch="0" ver="0" rel="0.el7"/>
  <changelog author="Yannick Cote &lt;ycote@redhat.com&gt; [0-0.el7]" date="1606910400">- An empty patch to subscribe to kpatch stream for kernel-3.10.0-1160.11.1.el7 [1903664]</changelog>
</package>
<package pkgid="d276800883472e0b0e69465439a73e0c994118d03aecff1ff821593993c3b641" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="66c21fc6ec7d54c3405326999ab81c73df2a78a5038d86e3b14b2b8cabd42d95" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="4f0faeff1a4e0f155a92dccdee1ffbb9c1decad7afe22741b2ffaf528079c740" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="03a0e467803b7d11ea67a1381dff4942fde2e33282e19d0004368ec9b80c9b65" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="5db6ee45128591b2d3e1ac555456d7076607dbf02629a10974003ca968937f8f" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="d8b131b360a2a0eec2ea07883a08eb531b1e2fb1373c00c9db1449193f1d69f4" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="dce4b188bbde93a5ec723c882f9b1c0686476663df3e939b8c754e6734c31433" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="ad8c1e235946d86bbf4643db38fd2acc88431ebbfef6d71fed14829bdd34b54a" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="70bb449230390aa511ef33aeaad24ba26d33c11f62a7a539e94f95809e7b06d2" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="14c24259583e56b28ab8e206903cb83319084f6c31918e1d2e16fad31958237e" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="a3e58da27c9dc6e7aa68a6a056556ee8b48e331315311a30017b9983de523bda" name="krb5-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="37b7e54f9f7a0d06acfe58aa1295f7eb9855498d960a0965ea0554fc434c7d30" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="28a07b8cd44eb1e258853d5f7dfcc10f43e0272af06c93e650800ccf97f9bcaf" name="krb5-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="e99d04bf7a4d4d22fe42efac8ea8611c2cd7adf1d67935f5a96350f73482515f" name="krb5-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="c2a76957869363868adc3d157eed099960bd8e1a3d9755cbc8bd5ffe4540c9f9" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="9c78ce8821e8c03ab774588dfe92cc6433450a191e6a9f7c346e5f7a4584d4b3" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="060a3f933c010f2d03708de5c0f45bb2b7ee46bb06ad9ba680e0212daa1fad5d" name="krb5-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="fd14c7d3cbf9fece3eca7f0ad20b5c9dd4544318371f02c9871897bb52979839" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="af595b3e7a73f5f2ec26593e58e37d8d5a9b134e5a1fd07e27e376dc915fe933" name="krb5-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="fd51137cbff891b7b4b784db62264eb844fd13f4a2550c8728688f9e70ce24bb" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="1591cffb7876336f390f410c3f7ab83651ec11994c7f5ef69327d72799931568" name="krb5-devel" arch="i686">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="2ea1a5d5540c91469cb0a396ea27ec38c2d742efe4ba083441bdb8839c410f01" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="b985ffeb45659165405c86c1070e61c90b87746c47a53be6549a21ebf3438b8e" name="krb5-devel" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="32440eb953d25ca284f13f9f7c0fcc91a4d8ff9af363fc54d3b26bb6ca1bd30a" name="krb5-devel" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="3647af794b8efad1e387eda33b2d76e4ab8aa9ca6be4e4eab15646225201edee" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="8e940a51b1ec69420e4dc5b06d6d7c212eb8343536877180347a0c60f725f839" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="42de927fc1704282bf4df171850952a28ae1927a50c13fb2087bed37a34a6ecd" name="krb5-devel" arch="i686">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="73936005277169abcbf6ec5fb8351b2ea956b3a214599d274e8eb14f8b7111cc" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="f78b51c8906614e2a6b68caadbe5f4c629fdb6cef2473c3ab0b94d9816ce83ad" name="krb5-devel" arch="i686">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="c3e5dc85a133f9d87442560ae9989a7c0622211d66777775c71c1e986c9ca710" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="8d2e2cd0cfb4cb7e8604f19cb5072884ff313216b1d51b7905d950415e6e252b" name="krb5-libs" arch="i686">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="1cb799e4a060d553db8b9a266654863dc5623c9b799c77d2b8304c9d9ea6a015" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="626682fb6836c1030cb9c5ef9aed7ac184361a27f31f9df557741965f503f87f" name="krb5-libs" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="74621a1243ce39b148dab08bdddad1197f4124d133c21412573a654ca67e161e" name="krb5-libs" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="1152d228fe341d45655e75c1539f7ea5c96adbd1c0e4e140eb4e2cfabfb4db49" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="276f1c431e779c559aa739ee1918ac9a5e778b14a08e8ec5fd0a20bf0d69fe7c" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="bf4b4f06f061ee0bc57244eeccc6a16236dd379978eb28adbc50aa8cff612e01" name="krb5-libs" arch="i686">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="04b45ab4898c779a6de60b1f3cca7ef2e8f94ee10851e5b2584461f34249b7dd" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="3bd2f075070c62e14d73278ee06be6f3fc6f3ceb5bfcaeeba18ba3ea6264f176" name="krb5-libs" arch="i686">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="73e5bdcbbaee9990b3be377ca8be67ba16165419e7880378629dfddd2b4ec045" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="2e7ce42960cb81141f2b0f4a47b606cfb0a24bbfdfe0c2c4657f1a5f6e2a289e" name="krb5-pkinit" arch="i686">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="c3fcdf23ad0d87c2d7883f39ffd3c37ebaad378730317fc7d9fe34e787b3834e" name="krb5-pkinit" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="e1b205acefb3d700accddfc8a9b7c9b9f37bdacc0fb4319cdd2be099ea791690" name="krb5-pkinit" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="f438571e24bae7368fba7221facdd661e82fb26c17a1e779517a3a0de060045e" name="krb5-pkinit" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="323fced42e849eeefeb76f5251f20c84dd5459b3cba6be4bd487d14937c9ef48" name="krb5-pkinit" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="eb18fd9047ed5780d3828f3314d2f1fb13bb3b69a88d8054c073b40d4cf69c1a" name="krb5-pkinit" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="f184a5f6dbe102b302da117f134d999a2f2ea9a3eb0c4816830af2d886326d0d" name="krb5-pkinit" arch="i686">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="a2c79e14619bd1cab5e81bb00621d10c5e475e067485811bed1a1e4e18ba6daa" name="krb5-pkinit" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="27ad2c74b5f23cca5a5a6c4f5801922a1a7c6ed151cbdee352ad9e42e2829d27" name="krb5-pkinit" arch="i686">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="1700419d54901057a415f755f2ae881637a2035b04502e8b0709ea48ff15f660" name="krb5-pkinit" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="e2f291c77272ccdb7d8c1df66eab93bb703ec205ce173dd7ecc6fcbfadc46680" name="krb5-server" arch="i686">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="f5541202ebb75d4d1afaa267db665870b4704393fc5e72240c19dee0875a3800" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="5324730080e6f98a84449c210a30484b8bcada53cdbc96fc46680175eccbc9b4" name="krb5-server" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="74fc3d6ef556cae40433c757a6132c7118b3dca1a1c5254ba90ae3348a431340" name="krb5-server" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="866502e25712c78f8a3255bf44bc87aab4c2f1d4e2d25849d8461710efde46d7" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="15f2814af3cf660b9ae3c83a81b4835a017b851549f56743d191ba8fd46f5568" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="052cdc18430a0233b83387ee9f701bc05de529d8c3cf415c1cebade494b82a98" name="krb5-server" arch="i686">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="6457db31a1971683693bd8a1f10206c3c715c381689d985ea858b75859636202" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="902fa96985aea4ad107e1b2dcd7cd6dc20dd04f2d0e017942103bb8d7de5a565" name="krb5-server" arch="i686">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="c891a365f10d195b77d886bdf0cc361db8d2fc266240f2c20001c9d8f35a02e0" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="8c0097b945fc585aa98263be3dd617e24d81f543f830a95ccb758ba4647c864b" name="krb5-server-ldap" arch="i686">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="90ba6b939d72527fd33feefbe7429ba52d875168bf55edcd7bd7ce0a51cea4bc" name="krb5-server-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="b77490235bafaac2292daf3886eb7ab8f7fe9ed8c441b42af733cff111529580" name="krb5-server-ldap" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="0fd9c6d6c53620d30c84d4ea28a00f6aaa2fa1724a441758fe53e100143769d1" name="krb5-server-ldap" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="d7c07ef900fea77feb44aad50c6da685f0daebaea1522778eb80f673d4654d65" name="krb5-server-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="6ff8393701e1e91777783176beae087a6adeacb44c8a383ef2f83a8cf2ba5724" name="krb5-server-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="20bf3eb1775d4b8173801750c7415837496b7deb97b8901d3e53c13f00f64269" name="krb5-server-ldap" arch="i686">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="3794c76a89110c792ae277565b491c006398d2c95dacc23512cdb4c0f1c69e8f" name="krb5-server-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="08b0369758f5ad4e2093237b91c3912ff6a1c64a4034eca66bb2a0330734d325" name="krb5-server-ldap" arch="i686">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="746e72c07c9faf0e496368c0db24814b6e7a64f400b2ca6a4e75a07ad27f79a7" name="krb5-server-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="2b2a5ee2a1b598ab8386dae57a52a66470a9b549f431c5963e63672f57957022" name="krb5-workstation" arch="i686">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="1447b1ecd99f90226554e5838a59b29571c2e06d8f1104f0aae4f1be29314f49" name="krb5-workstation" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="b2e3e3965f538c39a1c6bda059db29f37d9855e880f6f7f3dd6c157e88067d6e" name="krb5-workstation" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="ca55f16f4775108080139408f170a12174a491ba83672d4a74b39219a86ad97e" name="krb5-workstation" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="a52dd24aa4c4ad08b540bdd41cdfb7313e3ec2824ac588be73d4794fbe9134da" name="krb5-workstation" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="9e6a87ea77e7f7a8e28b9df97390a8450470a3646a3dbd1d7554d8ab10be5e08" name="krb5-workstation" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="84474f3b76da8566cb82ec45f6b63b9f1e0f6ee0f5eb3d5caaa5c4434865ace3" name="krb5-workstation" arch="i686">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="35586aba8d8c7a0be987c1d61d41fda7e744a43bb615b555b9017d67ea02c621" name="krb5-workstation" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="989b550742ea4ec8597ea2a42c81b9e0b5a877d813b8ed3fb469051745bcbba8" name="krb5-workstation" arch="i686">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="cdc0d64c1e84c583055e9e6f655576befbf390093b21fcbe2d75e8f812a3b918" name="krb5-workstation" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="6fec4cfd31e36bad746daad0353411151890506b095fcc7f6a08b34ca325ac4f" name="ksh" arch="i686">
  <version epoch="0" ver="20120801" rel="143.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1506340800">- Fix warning while creating kia file
  Resolves: #1438045</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340801">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
</package>
<package pkgid="31a733480e29f4914ae0a6860dc47e0a86c8aa64c3791770e0532c783070cbc8" name="ksh" arch="src">
  <version epoch="0" ver="20120801" rel="143.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1506340800">- Fix warning while creating kia file
  Resolves: #1438045</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340801">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
</package>
<package pkgid="a64aecf4a0ab93b5b3c4ee74056aa9a74a7f931ad51bb6f2c0b50cdf2e269bed" name="ksh" arch="src">
  <version epoch="0" ver="20120801" rel="143.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1506340800">- Fix warning while creating kia file
  Resolves: #1438045</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340801">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
</package>
<package pkgid="bd83d3b6f97da2e7f5fa1babccef69865f0570f6e4bde406f0cfeebe77f0093b" name="ksh" arch="x86_64">
  <version epoch="0" ver="20120801" rel="143.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1506340800">- Fix warning while creating kia file
  Resolves: #1438045</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340801">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
</package>
<package pkgid="6b2d1a9776832fab81d49725a42053a71517a5f95cdef88c6bf189cbce4af613" name="ksh" arch="i686">
  <version epoch="0" ver="20120801" rel="144.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340800">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-144" date="1646136000">- Stack robustness additional fixes
  Resolves: #2053503</changelog>
</package>
<package pkgid="7443c5b066a5da241f504f0191b2caac8162568aafa48c9212391c7f28a8357e" name="ksh" arch="src">
  <version epoch="0" ver="20120801" rel="144.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340800">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-144" date="1646136000">- Stack robustness additional fixes
  Resolves: #2053503</changelog>
</package>
<package pkgid="da6db7154b84300d758baff9176bd67e2055cc21add650805cfda2945690cbd6" name="ksh" arch="src">
  <version epoch="0" ver="20120801" rel="144.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340800">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-144" date="1646136000">- Stack robustness additional fixes
  Resolves: #2053503</changelog>
</package>
<package pkgid="94906960305e1ba739e8b09eb17185271d80d47c4995c7bfdb1fb27409cbb079" name="ksh" arch="x86_64">
  <version epoch="0" ver="20120801" rel="144.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340800">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-144" date="1646136000">- Stack robustness additional fixes
  Resolves: #2053503</changelog>
</package>
<package pkgid="1a2451b7f381dff19cec3c53ba8db696087b906f46f2c479be4c3727714c6d37" name="ksh-debuginfo" arch="i686">
  <version epoch="0" ver="20120801" rel="143.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1506340800">- Fix warning while creating kia file
  Resolves: #1438045</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340801">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
</package>
<package pkgid="3b8ed2a6bfb1421a7e608585792844c744d8ccd3c6db070a0678558e1e3182b3" name="ksh-debuginfo" arch="x86_64">
  <version epoch="0" ver="20120801" rel="143.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1506340800">- Fix warning while creating kia file
  Resolves: #1438045</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340801">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
</package>
<package pkgid="33fad38926250a70acc2543647ff40271196c6dd806b880c498ef6bd6da1fc2b" name="ksh-debuginfo" arch="i686">
  <version epoch="0" ver="20120801" rel="144.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340800">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-144" date="1646136000">- Stack robustness additional fixes
  Resolves: #2053503</changelog>
</package>
<package pkgid="4b7b054c57944f3bb8b8a6b86f75d41b907ccde83e545120f64aa2b4368e4e30" name="ksh-debuginfo" arch="x86_64">
  <version epoch="0" ver="20120801" rel="144.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340800">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-144" date="1646136000">- Stack robustness additional fixes
  Resolves: #2053503</changelog>
</package>
<package pkgid="c1bdd30172cba6d737eef85661c11aa13bd9419720f9f18b8066072a93d02564" name="ksysguard" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="5566cb8cdb4166c0bfa13f12bbcbfbd56f0ff7b29278f66faa93f631d112812c" name="ksysguard" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="8a0c4c47cad44c01a8745f85f8acf8a5d894eb8564e5e3a866ecec0a19e39fc7" name="ksysguard-libs" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="d21869be75a7b6cc90ee1a9d1b3d371de2f0f8117077039826b41cc68cfe8a1d" name="ksysguard-libs" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="fad1f27b7c75dda29a353832ca913b12070cd889985adc53eb91b3b77e06964f" name="ksysguardd" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="ac9b712932707abd140ffa9aed4f776637b51bdc02f2197cf32ae979a1ac895c" name="ksysguardd" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="28ce2e3f632006b01da2424a75536cb3d4120fc61705f88f57aeacc3bf5c4db0" name="kwin" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="d7808f7a717a1a0f21a41bd97914a58e2c082e61974a90f326952913168241d2" name="kwin" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="f55106e46c231bc51149d569ef5d98cf7ef8fd495a11b556f729dec2fefb00e3" name="kwin-gles" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="e5ee040b3da32a789e0d124f6a92ff77d146f3ea771f43f759daf1c74ea15984" name="kwin-gles" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="8d5ab2778bc7db48482059a416e54f8d7cc5d0f267f09a28a251fe0cdce5aa47" name="kwin-gles-libs" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="88d62aace0d9fe56a938d2b932243743fc21675839756b18ad440489afb1d03b" name="kwin-gles-libs" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="15edc204eff95319159c61ba00326f81cd7c3cac43577606328f0f9bc9211159" name="kwin-libs" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="dadd2fc30bb090a535bc8c1d7ce0c8a103ee134c96e243cd3ed2785844c5cc6d" name="kwin-libs" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="3e85d9f8e078081d928c759bc09636106952e12dad0e31a3586890a8b3f7e2a2" name="lasso" arch="i686">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="7d7e5266004ed41bc6fe595ed45b6d417aadcabfb288c0dbb54f6d019e784e8f" name="lasso" arch="src">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="8d9b719ad0f270cde1a170d9a7bd22dc1832627400ba9a7ae69ace87bbf1d44c" name="lasso" arch="src">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="17e7a0176ef54af065a005b44feca1f6fb6802a5d53333afafb811efdea2d98c" name="lasso" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="730b2b71e80d4b02f298d4453c534988e4e2432e1529e33a6a1cc95b0928107b" name="lasso-debuginfo" arch="i686">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="552a0b18b1713efb8bb4ec4e86e20e91529550d78e3bf7aba4dbdd0a25ac9311" name="lasso-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="f513966adce32806ff42d1486859902513fba7dd9618e63844e1e3d33be76d5c" name="lasso-devel" arch="i686">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="8b1f21ee183b04b6f1553f9adfca97360a36dd86f513d62936da89fab220e59c" name="lasso-devel" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="f86997fa0be722b0deb61169d0bc9162404364bebd6dd82e0bbbb6855e7fa157" name="lasso-python" arch="i686">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="2e3faf0da4524fe5a39dc0bc298a6331edc6dd4c9b6d66844586fb1b70d1e577" name="lasso-python" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="eaf29a683285032a728885835d60c364787bd1571edff958b344e3f566961260" name="ldb-tools" arch="i686">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="3b4977d7db687677c669a74cb99de32d3af1f47283c337acc5312ea747787ca4" name="ldb-tools" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="35c619a8f4cc8c999f5aa22222ab2692964ff6fb89657f90ce86ad0cb9aa2c9c" name="lftp" arch="i686">
  <version epoch="0" ver="4.4.8" rel="14.el7_9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-5" date="1431432000">- Fix option xfer:auto-rename not documented (#1035229)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-6" date="1431518400">- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS 
  version (#1182987)
- Fixed bogus dates of this SPEC</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-7" date="1434369600">- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-8" date="1463054400">- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror</changelog>
  <changelog author="Michal Ruprich - 4.4.8-9" date="1478520000">- Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp</changelog>
  <changelog author="Michal Ruprich - 4.4.8-10" date="1479124800">- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                    - Patch edited so that it corresponds to upstream</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-11" date="1526040000">- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-12" date="1563969600">- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-13" date="1580817600">- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-14" date="1664798400">- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7</changelog>
</package>
<package pkgid="12a494838c5a5dc78718e9e701f41cc7c0d13e873714c280a8d63e49c61a69d7" name="lftp" arch="src">
  <version epoch="0" ver="4.4.8" rel="14.el7_9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-5" date="1431432000">- Fix option xfer:auto-rename not documented (#1035229)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-6" date="1431518400">- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS 
  version (#1182987)
- Fixed bogus dates of this SPEC</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-7" date="1434369600">- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-8" date="1463054400">- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror</changelog>
  <changelog author="Michal Ruprich - 4.4.8-9" date="1478520000">- Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp</changelog>
  <changelog author="Michal Ruprich - 4.4.8-10" date="1479124800">- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                    - Patch edited so that it corresponds to upstream</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-11" date="1526040000">- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-12" date="1563969600">- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-13" date="1580817600">- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-14" date="1664798400">- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7</changelog>
</package>
<package pkgid="8fd49390fc2987485d6a902a28d51955d804113da246a81345ea88400c067d6e" name="lftp" arch="src">
  <version epoch="0" ver="4.4.8" rel="14.el7_9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-5" date="1431432000">- Fix option xfer:auto-rename not documented (#1035229)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-6" date="1431518400">- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS 
  version (#1182987)
- Fixed bogus dates of this SPEC</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-7" date="1434369600">- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-8" date="1463054400">- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror</changelog>
  <changelog author="Michal Ruprich - 4.4.8-9" date="1478520000">- Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp</changelog>
  <changelog author="Michal Ruprich - 4.4.8-10" date="1479124800">- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                    - Patch edited so that it corresponds to upstream</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-11" date="1526040000">- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-12" date="1563969600">- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-13" date="1580817600">- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-14" date="1664798400">- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7</changelog>
</package>
<package pkgid="8d618f7a335c081ba26557a5a56724b6b2bbd27d70ce8e17f9f863459e79c766" name="lftp" arch="x86_64">
  <version epoch="0" ver="4.4.8" rel="14.el7_9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-5" date="1431432000">- Fix option xfer:auto-rename not documented (#1035229)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-6" date="1431518400">- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS 
  version (#1182987)
- Fixed bogus dates of this SPEC</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-7" date="1434369600">- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-8" date="1463054400">- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror</changelog>
  <changelog author="Michal Ruprich - 4.4.8-9" date="1478520000">- Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp</changelog>
  <changelog author="Michal Ruprich - 4.4.8-10" date="1479124800">- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                    - Patch edited so that it corresponds to upstream</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-11" date="1526040000">- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-12" date="1563969600">- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-13" date="1580817600">- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-14" date="1664798400">- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7</changelog>
</package>
<package pkgid="08724b58d212d9a58217e742464ab29ceeaa5683129726ac7834925eb1ab3555" name="lftp-debuginfo" arch="i686">
  <version epoch="0" ver="4.4.8" rel="14.el7_9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-5" date="1431432000">- Fix option xfer:auto-rename not documented (#1035229)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-6" date="1431518400">- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS 
  version (#1182987)
- Fixed bogus dates of this SPEC</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-7" date="1434369600">- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-8" date="1463054400">- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror</changelog>
  <changelog author="Michal Ruprich - 4.4.8-9" date="1478520000">- Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp</changelog>
  <changelog author="Michal Ruprich - 4.4.8-10" date="1479124800">- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                    - Patch edited so that it corresponds to upstream</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-11" date="1526040000">- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-12" date="1563969600">- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-13" date="1580817600">- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-14" date="1664798400">- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7</changelog>
</package>
<package pkgid="6f1b532114950af3d8a93fac37528bdc0a847b109da6ca2edc2a615aedac6554" name="lftp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.8" rel="14.el7_9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-5" date="1431432000">- Fix option xfer:auto-rename not documented (#1035229)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-6" date="1431518400">- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS 
  version (#1182987)
- Fixed bogus dates of this SPEC</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-7" date="1434369600">- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-8" date="1463054400">- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror</changelog>
  <changelog author="Michal Ruprich - 4.4.8-9" date="1478520000">- Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp</changelog>
  <changelog author="Michal Ruprich - 4.4.8-10" date="1479124800">- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                    - Patch edited so that it corresponds to upstream</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-11" date="1526040000">- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-12" date="1563969600">- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-13" date="1580817600">- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-14" date="1664798400">- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7</changelog>
</package>
<package pkgid="4dc596216c31f3485b9d2efabc2493a56464f226fbe25d91ed6a6957ee4a40d9" name="lftp-scripts" arch="noarch">
  <version epoch="0" ver="4.4.8" rel="14.el7_9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-5" date="1431432000">- Fix option xfer:auto-rename not documented (#1035229)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-6" date="1431518400">- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS 
  version (#1182987)
- Fixed bogus dates of this SPEC</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-7" date="1434369600">- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-8" date="1463054400">- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror</changelog>
  <changelog author="Michal Ruprich - 4.4.8-9" date="1478520000">- Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp</changelog>
  <changelog author="Michal Ruprich - 4.4.8-10" date="1479124800">- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                    - Patch edited so that it corresponds to upstream</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-11" date="1526040000">- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-12" date="1563969600">- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-13" date="1580817600">- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-14" date="1664798400">- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7</changelog>
</package>
<package pkgid="95171a2ca23f40ec183854e0da8710881e979bce560113fbd59b7b4d5400788f" name="lftp-scripts" arch="noarch">
  <version epoch="0" ver="4.4.8" rel="14.el7_9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-5" date="1431432000">- Fix option xfer:auto-rename not documented (#1035229)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-6" date="1431518400">- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS 
  version (#1182987)
- Fixed bogus dates of this SPEC</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-7" date="1434369600">- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-8" date="1463054400">- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror</changelog>
  <changelog author="Michal Ruprich - 4.4.8-9" date="1478520000">- Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp</changelog>
  <changelog author="Michal Ruprich - 4.4.8-10" date="1479124800">- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                    - Patch edited so that it corresponds to upstream</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-11" date="1526040000">- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-12" date="1563969600">- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-13" date="1580817600">- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-14" date="1664798400">- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7</changelog>
</package>
<package pkgid="894f6599d4beb36fc0ddb4262272660347289b39594eda04d1cfcb51ff71e298" name="libX11" arch="i686">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="0511ccc219499261aee8e3b155f5f9cbeace923f8d7c5f7355d3bb3f439a6e87" name="libX11" arch="src">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="fe16fdabcf47bab54f9575037da696f0d51037da951f0b1d3ca5a698a237c226" name="libX11" arch="src">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="fe95ce471401d30513e2194327c646b6e30a90efa436b32de34f43c52431a1df" name="libX11" arch="x86_64">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="ec210cc16bc9b0bbe8842e3c53f6b5455e2ca8a17f78f1a4834fe3d48aab7aa3" name="libX11" arch="i686">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="eacdf06c8585de5a2ed8fcefd06ec4a5228e27cfe11cbeeccd851fb8b65e8c04" name="libX11" arch="src">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="bf2d87f4d0ca7058e51bf99226af38da2a04303bd6f11c5e376c30ba7e8ad119" name="libX11" arch="src">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="372c19c8124aa38dc40480168f163c264799344b93f097074ddb57631ce1eec3" name="libX11" arch="x86_64">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="6320ad5a1bd70b66fddfb2c1d6aed38c1612fb8962a59b85fa3efac6e97e4e1c" name="libX11-common" arch="noarch">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="f80be400eed26a7ef08396af06a3b317afad18205ae4964bde25f881ae0a6d37" name="libX11-common" arch="noarch">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="347137a5ea7cfe1ce40cb2ff54721262bd99adc370f2dd8647e1b0ea30f26d13" name="libX11-common" arch="noarch">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="9b6fc1f5a4bc235309d2131ccace361b2fe1349dd63e7976671239da3e64919d" name="libX11-common" arch="noarch">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="f614fa928ec45ac3c6911b6f05c34c72a9f24701391c8e2305dc3cd1fc09f4a9" name="libX11-debuginfo" arch="i686">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="ce081387fe054d54afaf56395d35549af46cdb77c9ea29dd7e19a12c00705a17" name="libX11-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="4da4ea7262edd3284b33cbfd4e7e8810bee3cc5939940f9e8722d9ecad0e04ee" name="libX11-debuginfo" arch="i686">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="b8d2a521d4c63c780b05f3a91df538f179e7888ea66fe7bcb44e75c580849344" name="libX11-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="f7b3e3065aa6d54d00d3399cf1323f7bac7227e189bfa52877a1cce831d6b70e" name="libX11-devel" arch="i686">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="c6b1b50a8efd2e2251f43ba4265a8da49576d21d0b0c26acfcda00ce57beafef" name="libX11-devel" arch="x86_64">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="4071db4793835a9fbed74cd036b28a7079bad1ba8a914124a4ae5b35c68469af" name="libX11-devel" arch="i686">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="e8eaec32827876361d96578f20bc983d460af548a9473b836e2a20a0c7c805ec" name="libX11-devel" arch="x86_64">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="c43292c6572cb66bd36ec17de0fd9355826061312a76ca84ebeeac45f99fa46b" name="libXpm" arch="i686">
  <version epoch="0" ver="3.5.12" rel="2.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.10-1" date="1331208000">- libXpm 3.5.10</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.10-4" date="1362657600">- autoreconf for aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.11-1" date="1392206400">- libXpm 3.5.11
- Drop pre-F18 changelog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 3.5.12-1" date="1485172800">- libXpm 3.5.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.12-2" date="1674129600">- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)</changelog>
</package>
<package pkgid="b33e31664aed7a69db700de6ece9a667b3aeb9a0ab7834282de3c29f932326cd" name="libXpm" arch="src">
  <version epoch="0" ver="3.5.12" rel="2.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.10-1" date="1331208000">- libXpm 3.5.10</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.10-4" date="1362657600">- autoreconf for aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.11-1" date="1392206400">- libXpm 3.5.11
- Drop pre-F18 changelog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 3.5.12-1" date="1485172800">- libXpm 3.5.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.12-2" date="1674129600">- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)</changelog>
</package>
<package pkgid="7c16366a454ea9c454c453608b86ccfcefd5a0c974babf12e6016e41b6a8271c" name="libXpm" arch="src">
  <version epoch="0" ver="3.5.12" rel="2.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.10-1" date="1331208000">- libXpm 3.5.10</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.10-4" date="1362657600">- autoreconf for aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.11-1" date="1392206400">- libXpm 3.5.11
- Drop pre-F18 changelog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 3.5.12-1" date="1485172800">- libXpm 3.5.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.12-2" date="1674129600">- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)</changelog>
</package>
<package pkgid="fd46adf0a8358f8b04cb311d9aafb4f698497c5df846a8820368678cb409a8d6" name="libXpm" arch="x86_64">
  <version epoch="0" ver="3.5.12" rel="2.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.10-1" date="1331208000">- libXpm 3.5.10</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.10-4" date="1362657600">- autoreconf for aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.11-1" date="1392206400">- libXpm 3.5.11
- Drop pre-F18 changelog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 3.5.12-1" date="1485172800">- libXpm 3.5.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.12-2" date="1674129600">- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)</changelog>
</package>
<package pkgid="b68b44f1dc73bd251ce45cb82dfd51bfd1beaa554fd858959ae4e505415c3d39" name="libXpm-debuginfo" arch="i686">
  <version epoch="0" ver="3.5.12" rel="2.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.10-1" date="1331208000">- libXpm 3.5.10</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.10-4" date="1362657600">- autoreconf for aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.11-1" date="1392206400">- libXpm 3.5.11
- Drop pre-F18 changelog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 3.5.12-1" date="1485172800">- libXpm 3.5.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.12-2" date="1674129600">- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)</changelog>
</package>
<package pkgid="24b432d204023d06754c14d04ab2573d9c9e20a91ff88a5f610718878cc77919" name="libXpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.5.12" rel="2.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.10-1" date="1331208000">- libXpm 3.5.10</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.10-4" date="1362657600">- autoreconf for aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.11-1" date="1392206400">- libXpm 3.5.11
- Drop pre-F18 changelog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 3.5.12-1" date="1485172800">- libXpm 3.5.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.12-2" date="1674129600">- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)</changelog>
</package>
<package pkgid="fe3d46711857585dd3a4d79bca34930b6276d18fcf567257a76c5a20eebce10c" name="libXpm-devel" arch="i686">
  <version epoch="0" ver="3.5.12" rel="2.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.10-1" date="1331208000">- libXpm 3.5.10</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.10-4" date="1362657600">- autoreconf for aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.11-1" date="1392206400">- libXpm 3.5.11
- Drop pre-F18 changelog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 3.5.12-1" date="1485172800">- libXpm 3.5.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.12-2" date="1674129600">- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)</changelog>
</package>
<package pkgid="75e98602fcccc9f24c3b4c26136cdfe6be86b94967a39ee9a962d59c2e708961" name="libXpm-devel" arch="x86_64">
  <version epoch="0" ver="3.5.12" rel="2.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.10-1" date="1331208000">- libXpm 3.5.10</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.10-4" date="1362657600">- autoreconf for aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.11-1" date="1392206400">- libXpm 3.5.11
- Drop pre-F18 changelog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 3.5.12-1" date="1485172800">- libXpm 3.5.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.12-2" date="1674129600">- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)</changelog>
</package>
<package pkgid="cf17d673c230e06bb8c2a4694b2302a9f6bb71cc995f42b0582fa55dfd94a4b7" name="libblkid" arch="i686">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="b751900e5f2a5dfb2869daef3d723cdd7b54712718fdb00eadb51bd5060ae9bb" name="libblkid" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="1726043b02b0a525de8310c7f38921315b27640193ee88a4851c707c0086e725" name="libblkid-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="1da1bf0e8ccce869df508f1eafc068a1f5de58e8c698094fb3a0835fa08f64fd" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="6e9c864f901b30d7d6007093295febfc0efcbfa1867fde6b033a8cc116a5de40" name="libcroco" arch="i686">
  <version epoch="0" ver="0.6.12" rel="6.el7_9"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.7-1" date="1350388800">- Update to 0.6.7</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.8-1" date="1352462400">- Update to 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.8-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.8-3" date="1373976000">- Disable strict aliasing, since the code is not strict-aliasing-clean</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.11-1" date="1450353600">- Update to 0.6.11
- Resolves: #1386999</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.12-4" date="1491480000">- Update to 0.6.12
- Resolves: #1569991</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-5" date="1596456000">- Fix CVE-2020-12825
  Resolves: #1835951</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-6" date="1596456001">- Rebuild with 7.9-z target
  Related: #1835951</changelog>
</package>
<package pkgid="f8a8f9023c0e957f47d701b92ab934f4c2073ab73984968398f5f0fc39ce36ba" name="libcroco" arch="src">
  <version epoch="0" ver="0.6.12" rel="6.el7_9"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.7-1" date="1350388800">- Update to 0.6.7</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.8-1" date="1352462400">- Update to 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.8-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.8-3" date="1373976000">- Disable strict aliasing, since the code is not strict-aliasing-clean</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.11-1" date="1450353600">- Update to 0.6.11
- Resolves: #1386999</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.12-4" date="1491480000">- Update to 0.6.12
- Resolves: #1569991</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-5" date="1596456000">- Fix CVE-2020-12825
  Resolves: #1835951</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-6" date="1596456001">- Rebuild with 7.9-z target
  Related: #1835951</changelog>
</package>
<package pkgid="5253938d5e7313263476cc688b35c9950a5b071a65b50b4daa30ad2345916bac" name="libcroco" arch="src">
  <version epoch="0" ver="0.6.12" rel="6.el7_9"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.7-1" date="1350388800">- Update to 0.6.7</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.8-1" date="1352462400">- Update to 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.8-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.8-3" date="1373976000">- Disable strict aliasing, since the code is not strict-aliasing-clean</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.11-1" date="1450353600">- Update to 0.6.11
- Resolves: #1386999</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.12-4" date="1491480000">- Update to 0.6.12
- Resolves: #1569991</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-5" date="1596456000">- Fix CVE-2020-12825
  Resolves: #1835951</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-6" date="1596456001">- Rebuild with 7.9-z target
  Related: #1835951</changelog>
</package>
<package pkgid="7f9f80e1eeb943980cea6be7bc064bd46e24158a806958e8253c211778f0bb86" name="libcroco" arch="x86_64">
  <version epoch="0" ver="0.6.12" rel="6.el7_9"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.7-1" date="1350388800">- Update to 0.6.7</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.8-1" date="1352462400">- Update to 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.8-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.8-3" date="1373976000">- Disable strict aliasing, since the code is not strict-aliasing-clean</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.11-1" date="1450353600">- Update to 0.6.11
- Resolves: #1386999</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.12-4" date="1491480000">- Update to 0.6.12
- Resolves: #1569991</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-5" date="1596456000">- Fix CVE-2020-12825
  Resolves: #1835951</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-6" date="1596456001">- Rebuild with 7.9-z target
  Related: #1835951</changelog>
</package>
<package pkgid="a4cd4b03c9d02988f4cbcf68419b6de652b09cdb27495d7e0403b3deb1ac9015" name="libcroco-debuginfo" arch="i686">
  <version epoch="0" ver="0.6.12" rel="6.el7_9"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.7-1" date="1350388800">- Update to 0.6.7</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.8-1" date="1352462400">- Update to 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.8-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.8-3" date="1373976000">- Disable strict aliasing, since the code is not strict-aliasing-clean</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.11-1" date="1450353600">- Update to 0.6.11
- Resolves: #1386999</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.12-4" date="1491480000">- Update to 0.6.12
- Resolves: #1569991</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-5" date="1596456000">- Fix CVE-2020-12825
  Resolves: #1835951</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-6" date="1596456001">- Rebuild with 7.9-z target
  Related: #1835951</changelog>
</package>
<package pkgid="0520b5fb6a9a65cbd99f363aed6e70986f10e0955cb102d83393e45e37b77c8c" name="libcroco-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.12" rel="6.el7_9"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.7-1" date="1350388800">- Update to 0.6.7</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.8-1" date="1352462400">- Update to 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.8-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.8-3" date="1373976000">- Disable strict aliasing, since the code is not strict-aliasing-clean</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.11-1" date="1450353600">- Update to 0.6.11
- Resolves: #1386999</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.12-4" date="1491480000">- Update to 0.6.12
- Resolves: #1569991</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-5" date="1596456000">- Fix CVE-2020-12825
  Resolves: #1835951</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-6" date="1596456001">- Rebuild with 7.9-z target
  Related: #1835951</changelog>
</package>
<package pkgid="2ed33f6a2fd3cfc3ab660779d9ebd1fcb93612b5f5e30520bd88a6d3c30b3717" name="libcroco-devel" arch="i686">
  <version epoch="0" ver="0.6.12" rel="6.el7_9"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.7-1" date="1350388800">- Update to 0.6.7</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.8-1" date="1352462400">- Update to 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.8-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.8-3" date="1373976000">- Disable strict aliasing, since the code is not strict-aliasing-clean</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.11-1" date="1450353600">- Update to 0.6.11
- Resolves: #1386999</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.12-4" date="1491480000">- Update to 0.6.12
- Resolves: #1569991</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-5" date="1596456000">- Fix CVE-2020-12825
  Resolves: #1835951</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-6" date="1596456001">- Rebuild with 7.9-z target
  Related: #1835951</changelog>
</package>
<package pkgid="2adb47ef64ecbe5b57377b80e5f1ba32ff038ab9f0e76b9e3723e39968f30d5f" name="libcroco-devel" arch="x86_64">
  <version epoch="0" ver="0.6.12" rel="6.el7_9"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.7-1" date="1350388800">- Update to 0.6.7</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.6.8-1" date="1352462400">- Update to 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.8-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 0.6.8-3" date="1373976000">- Disable strict aliasing, since the code is not strict-aliasing-clean</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.8-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.6.11-1" date="1450353600">- Update to 0.6.11
- Resolves: #1386999</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.12-4" date="1491480000">- Update to 0.6.12
- Resolves: #1569991</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-5" date="1596456000">- Fix CVE-2020-12825
  Resolves: #1835951</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.12-6" date="1596456001">- Rebuild with 7.9-z target
  Related: #1835951</changelog>
</package>
<package pkgid="2c0a50745a8267c4fb3dfe8b3c38f3b184837906452ca24d373a8ab3a267446a" name="libcurl" arch="i686">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="09e66d51ed66dac5678206de5abb094086435d5ac902bbd8b9d026d0e5e15c91" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="3a502da0ffd704c009783bcbe8eb662fec8a190c79a3a761ee36383cab111312" name="libcurl" arch="i686">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="3f63bcc793473796a0bc2ada874cff96f881c885a1a76e9ce0b0a48924d1e1a3" name="libcurl" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="a26a1c347553b936289dbc6fc58baf07699403609c1cc9829c51b28ecc79fbe6" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="9320cf031d394213edf654637694f5438d029d76dd67ff20d6d9949bc1c16815" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="b8e58dcdddb4eb98d9baddcfb50011acf4e3e28682c63d7193f87b3f88d46bba" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="cb29dc329435da7bc44dcb5a2aa334a9ad1d4508833a2afa62ed419f965326b0" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="276bd7d47629f10e57491fe1e4d62430d315be2b26a479b961c9f44f097d8951" name="libdmmp" arch="i686">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="2d8d4ddd9c5ba182dadf60c0c6e5e6a854e0a5f4bfb8882046bfdb48a992dba8" name="libdmmp" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="bcaa2f1c83e2e3a344887c1a62f8a714600e679a89c0c8d49d7fcc43c6c360d2" name="libdmmp" arch="i686">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="b87d1113b6bd6adb234a199c4390aa9f70173ceeb547fa43c6831e38635a2ca3" name="libdmmp" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="5955bd70c90983c287d6d7b30bc708bd6b5e4136900b08fd5544c9d8b4f6dc3d" name="libdmmp" arch="i686">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="b7520440d7f0d9ce7e71a31a2c12f5ebf2e95695c3c59b67a2c6940cc4df7539" name="libdmmp" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="21077392db65d7571c5db5abc5c80d1cb7b8851536c9c5ede61fbf6407b6543c" name="libdmmp-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="3c7652b457a46f7d24994336e74e20765e77db54983b1ac9fe5404963f07f91c" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="5f8093a715124858c472795123bb62a09bb20941692fab4d42693c6fe5ffcfb4" name="libdmmp-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="8235b0994260e15c866e7b99b567ba2f875ba9f38a51795026cb6595a0ef52e2" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="52e7ae1b8c3fb6b8584df68bb83848680c82f0f4252b6e359c110623895b1cb4" name="libdmmp-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="32742ac6a20894815cee94112448c43a89504022ab9c43bdf873d7fee5730759" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="26aa62515c3e8ae220967034960a6590ff85034541c6b5b01479b52509c85c20" name="libexif" arch="i686">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="49151723d7c177f6224334b8806afbcd8f29fa31a3f1fef406509bb2c29ef547" name="libexif" arch="src">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="e8595014306ba530f2573f6de05b74dcbcb09db8e493fbf82507b20b8911ec30" name="libexif" arch="src">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="a3f9adabe2cc825c11ee50f0866f756cbad7c654ad37bb55d0a19ffd40d5b346" name="libexif" arch="x86_64">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="a2d3e248519b6a5a410463788e1baeb5b04f786c0782464925a4cf7cd0c07985" name="libexif-debuginfo" arch="i686">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="f74ffb3cb3ddd179c14ac781eebcf72aea9f109ab1349d3bb94837e1060c09ed" name="libexif-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="855f0c6603b53a8f920c199b1e589744b691e7bbd9a31730dbb172077e436f82" name="libexif-devel" arch="i686">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="ae331cc091029bb4a6c6d7c8d03f69d10b2347f1574c0d3ddb963a9d4ddddccc" name="libexif-devel" arch="x86_64">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="13b469b4046114ec7118111a58ce3969780661fc1a3f38fa2d1cfb2d0244c186" name="libexif-doc" arch="i686">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="7323a9aa08d655982103e351464ce80d125e46a83c401478974f7392cd044d11" name="libexif-doc" arch="x86_64">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="2ffecbff398c745d23f6f0850f45cdb5ae5d339756bf41aa61f9a44586504d4e" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="78.el7_9.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-73.1" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.2" date="1582027200">- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.3" date="1583409600">- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
</package>
<package pkgid="62db54e9eae4c2e7dc8f496bb98b58c50b662d0611cb40c00a9ac24d5b84196f" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="78.el7_9.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-73.1" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.2" date="1582027200">- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.3" date="1583409600">- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
</package>
<package pkgid="5eb952c0ce4251d4cdc76731359f0f1b2915208707e25a8d1710c9991131131c" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="78.el7_9.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.2" date="1582027200">- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.3" date="1583409600">- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
</package>
<package pkgid="90b2560bec1c6699902ba40c9db4b561f5131cbaad33b79d092c38fe6b1b6725" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="78.el7_9.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.2" date="1582027200">- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.3" date="1583409600">- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
</package>
<package pkgid="353a5487472a263d6c986ab8c7ef3afcfd38bf0cc04692297b43c494a86818bf" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="78.el7_9.5"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
</package>
<package pkgid="eccca03bcc62655dcf5fff6674f3aa23bf8e6462a6679eab80b63d3160d1c285" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="78.el7_9.5"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
</package>
<package pkgid="0b87a173f49eb01b56e245b251e2b1625667eda1274f03043b76cbf40b19773b" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="78.el7_9.7"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161600">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
</package>
<package pkgid="0bd6076f9911798d52963c8a436d7dfd6879610d49205b3841f8dde781df1245" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="78.el7_9.7"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161600">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
</package>
<package pkgid="3ae05ffdfe398d5d36d1c1fd9829fbb1d8b3e3908195597db302aee74a122710" name="libgudev1" arch="i686">
  <version epoch="0" ver="219" rel="78.el7_9.9"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.8" date="1695729600">- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.9" date="1700654400">- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)</changelog>
</package>
<package pkgid="ba078d5e8e19806fbe0b8bcc5b3d4f2ec141bd270e90bbe10563ca4fc02c70fa" name="libgudev1" arch="x86_64">
  <version epoch="0" ver="219" rel="78.el7_9.9"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.8" date="1695729600">- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.9" date="1700654400">- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)</changelog>
</package>
<package pkgid="27a68f9b6ff51b9cde3991b12fcbd668784634af8868037e88ab151a6f082662" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="78.el7_9.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-73.1" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.2" date="1582027200">- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.3" date="1583409600">- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
</package>
<package pkgid="a7df5ecd928b520de0c9e870b891ebb0c89797a54f5e0bd84468ac68c44567e6" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="78.el7_9.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-73.1" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.2" date="1582027200">- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.3" date="1583409600">- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
</package>
<package pkgid="d6ccde65e52a5a829f1e0a993045b316394b83365eee9d1931a17ed5deda807b" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="78.el7_9.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.2" date="1582027200">- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.3" date="1583409600">- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
</package>
<package pkgid="9113195111f2f1740b84632d5441e2e76283f0b4228ab0d8888b1c953481dd77" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="78.el7_9.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.2" date="1582027200">- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.3" date="1583409600">- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
</package>
<package pkgid="ac56c0389655f638b35baf6e239997e565f51b96ee5c2ef9669b179f270516d6" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="78.el7_9.5"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
</package>
<package pkgid="37bd483755acb3b514cded1615a29654b26fbae7b8da97c1b8c9c25ddd2717a2" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="78.el7_9.5"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
</package>
<package pkgid="a64a411ba7740b74c08db9584af4c8ee8477774a2c642c9d299d7c1f15d5a430" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="78.el7_9.7"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161600">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
</package>
<package pkgid="a5f3601a0d70b7b678867eb5811ba3bc4f8afffc7299b34e95488e68a59f0f4d" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="78.el7_9.7"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161600">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
</package>
<package pkgid="95694133a40ca571465e3e1a3365498bbb4e9ebc9117399a96a4ed9af5286fee" name="libgudev1-devel" arch="i686">
  <version epoch="0" ver="219" rel="78.el7_9.9"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.8" date="1695729600">- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.9" date="1700654400">- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)</changelog>
</package>
<package pkgid="129d57f6a2b26e37adf0e5ce1fb8fc119fc8bc3f83e9a68683dcddd061658c07" name="libgudev1-devel" arch="x86_64">
  <version epoch="0" ver="219" rel="78.el7_9.9"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.8" date="1695729600">- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.9" date="1700654400">- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)</changelog>
</package>
<package pkgid="d41e40bb2285da5e76a7a671581ee46f1ed169502aa33cd88223db26db8f6a14" name="libgweather" arch="i686">
  <version epoch="0" ver="3.28.2" rel="4.el7_9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.1-2" date="1467374400">- Update translations
  Resolves: #1304249</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.14.1-3" date="1472644800">- Switch to new METAR data provider
- Resolves: #1371550</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.4-1" date="1482840000">- Update to 3.20.4
- Resolves: #1387009</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.0-1" date="1508760000">- Update to 3.26.0
- Related: #1481381</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1521720000">- Update to 3.28.1
- Resolves: #1569295</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-2" date="1529064000">- Backport a patch to fix a gnome-shell crash
- Related: #1569295</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.2-1" date="1533124800">- Update to 3.28.2
- Resolves: #1569295</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.28.2-2" date="1533816000">- Fix dangling symbolic link to README.md
- Resolves: #1569295</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.28.2-3" date="1564401600">- Fix multilib conflict in subpackage (#1623538)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.2-4" date="1616500800">- Fix no weather data available
- Resolves: #1938275</changelog>
</package>
<package pkgid="cd6e8d3c8751dafb78cd522d2903baea11cd36d1593818c8db9c15fcf851af51" name="libgweather" arch="src">
  <version epoch="0" ver="3.28.2" rel="4.el7_9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.1-2" date="1467374400">- Update translations
  Resolves: #1304249</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.14.1-3" date="1472644800">- Switch to new METAR data provider
- Resolves: #1371550</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.4-1" date="1482840000">- Update to 3.20.4
- Resolves: #1387009</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.0-1" date="1508760000">- Update to 3.26.0
- Related: #1481381</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1521720000">- Update to 3.28.1
- Resolves: #1569295</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-2" date="1529064000">- Backport a patch to fix a gnome-shell crash
- Related: #1569295</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.2-1" date="1533124800">- Update to 3.28.2
- Resolves: #1569295</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.28.2-2" date="1533816000">- Fix dangling symbolic link to README.md
- Resolves: #1569295</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.28.2-3" date="1564401600">- Fix multilib conflict in subpackage (#1623538)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.2-4" date="1616500800">- Fix no weather data available
- Resolves: #1938275</changelog>
</package>
<package pkgid="a5dcd67cd8f713db89a1d3c52e53840040bc4cb33028c45c481d4cd39888044a" name="libgweather" arch="src">
  <version epoch="0" ver="3.28.2" rel="4.el7_9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.1-2" date="1467374400">- Update translations
  Resolves: #1304249</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.14.1-3" date="1472644800">- Switch to new METAR data provider
- Resolves: #1371550</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.4-1" date="1482840000">- Update to 3.20.4
- Resolves: #1387009</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.0-1" date="1508760000">- Update to 3.26.0
- Related: #1481381</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1521720000">- Update to 3.28.1
- Resolves: #1569295</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-2" date="1529064000">- Backport a patch to fix a gnome-shell crash
- Related: #1569295</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.2-1" date="1533124800">- Update to 3.28.2
- Resolves: #1569295</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.28.2-2" date="1533816000">- Fix dangling symbolic link to README.md
- Resolves: #1569295</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.28.2-3" date="1564401600">- Fix multilib conflict in subpackage (#1623538)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.2-4" date="1616500800">- Fix no weather data available
- Resolves: #1938275</changelog>
</package>
<package pkgid="aca8b03d05d930ab5e791691a9d683cb0ec845b247b5c217716fa645e3073fff" name="libgweather" arch="x86_64">
  <version epoch="0" ver="3.28.2" rel="4.el7_9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.1-2" date="1467374400">- Update translations
  Resolves: #1304249</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.14.1-3" date="1472644800">- Switch to new METAR data provider
- Resolves: #1371550</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.4-1" date="1482840000">- Update to 3.20.4
- Resolves: #1387009</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.0-1" date="1508760000">- Update to 3.26.0
- Related: #1481381</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1521720000">- Update to 3.28.1
- Resolves: #1569295</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-2" date="1529064000">- Backport a patch to fix a gnome-shell crash
- Related: #1569295</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.2-1" date="1533124800">- Update to 3.28.2
- Resolves: #1569295</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.28.2-2" date="1533816000">- Fix dangling symbolic link to README.md
- Resolves: #1569295</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.28.2-3" date="1564401600">- Fix multilib conflict in subpackage (#1623538)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.2-4" date="1616500800">- Fix no weather data available
- Resolves: #1938275</changelog>
</package>
<package pkgid="e0501cb3d113099d6f66fe7483bbfc953b3109a6bbdddbf47f8abd7a56581dfb" name="libgweather-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.2" rel="4.el7_9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.1-2" date="1467374400">- Update translations
  Resolves: #1304249</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.14.1-3" date="1472644800">- Switch to new METAR data provider
- Resolves: #1371550</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.4-1" date="1482840000">- Update to 3.20.4
- Resolves: #1387009</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.0-1" date="1508760000">- Update to 3.26.0
- Related: #1481381</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1521720000">- Update to 3.28.1
- Resolves: #1569295</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-2" date="1529064000">- Backport a patch to fix a gnome-shell crash
- Related: #1569295</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.2-1" date="1533124800">- Update to 3.28.2
- Resolves: #1569295</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.28.2-2" date="1533816000">- Fix dangling symbolic link to README.md
- Resolves: #1569295</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.28.2-3" date="1564401600">- Fix multilib conflict in subpackage (#1623538)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.2-4" date="1616500800">- Fix no weather data available
- Resolves: #1938275</changelog>
</package>
<package pkgid="99fe2147c3e2e14b36c273a3ce0cc4c7f78c1265e886705220b6555de5dda6c2" name="libgweather-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.2" rel="4.el7_9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.1-2" date="1467374400">- Update translations
  Resolves: #1304249</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.14.1-3" date="1472644800">- Switch to new METAR data provider
- Resolves: #1371550</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.4-1" date="1482840000">- Update to 3.20.4
- Resolves: #1387009</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.0-1" date="1508760000">- Update to 3.26.0
- Related: #1481381</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1521720000">- Update to 3.28.1
- Resolves: #1569295</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-2" date="1529064000">- Backport a patch to fix a gnome-shell crash
- Related: #1569295</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.2-1" date="1533124800">- Update to 3.28.2
- Resolves: #1569295</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.28.2-2" date="1533816000">- Fix dangling symbolic link to README.md
- Resolves: #1569295</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.28.2-3" date="1564401600">- Fix multilib conflict in subpackage (#1623538)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.2-4" date="1616500800">- Fix no weather data available
- Resolves: #1938275</changelog>
</package>
<package pkgid="4bbe14fc55d11caa9a501d5c1c4f6eaaf0591eda5aeb93b3d1d0cfacffb81d07" name="libgweather-devel" arch="i686">
  <version epoch="0" ver="3.28.2" rel="4.el7_9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.1-2" date="1467374400">- Update translations
  Resolves: #1304249</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.14.1-3" date="1472644800">- Switch to new METAR data provider
- Resolves: #1371550</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.4-1" date="1482840000">- Update to 3.20.4
- Resolves: #1387009</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.0-1" date="1508760000">- Update to 3.26.0
- Related: #1481381</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1521720000">- Update to 3.28.1
- Resolves: #1569295</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-2" date="1529064000">- Backport a patch to fix a gnome-shell crash
- Related: #1569295</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.2-1" date="1533124800">- Update to 3.28.2
- Resolves: #1569295</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.28.2-2" date="1533816000">- Fix dangling symbolic link to README.md
- Resolves: #1569295</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.28.2-3" date="1564401600">- Fix multilib conflict in subpackage (#1623538)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.2-4" date="1616500800">- Fix no weather data available
- Resolves: #1938275</changelog>
</package>
<package pkgid="37a7895579793c9e5ff4b9e6aaf758300aa741e6bd80a1db9bde6bae1d47ec87" name="libgweather-devel" arch="x86_64">
  <version epoch="0" ver="3.28.2" rel="4.el7_9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.1-2" date="1467374400">- Update translations
  Resolves: #1304249</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.14.1-3" date="1472644800">- Switch to new METAR data provider
- Resolves: #1371550</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.4-1" date="1482840000">- Update to 3.20.4
- Resolves: #1387009</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.0-1" date="1508760000">- Update to 3.26.0
- Related: #1481381</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1521720000">- Update to 3.28.1
- Resolves: #1569295</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-2" date="1529064000">- Backport a patch to fix a gnome-shell crash
- Related: #1569295</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.2-1" date="1533124800">- Update to 3.28.2
- Resolves: #1569295</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.28.2-2" date="1533816000">- Fix dangling symbolic link to README.md
- Resolves: #1569295</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.28.2-3" date="1564401600">- Fix multilib conflict in subpackage (#1623538)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.2-4" date="1616500800">- Fix no weather data available
- Resolves: #1938275</changelog>
</package>
<package pkgid="23fc3e3502ceb07d52933118a78cf8446a1168dadf13b7cf7c4f4f8312cea682" name="libibumad" arch="i686">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="7d9136a6c3168adac2193b05758042e017d350f317b7da62b432974bbe65f98c" name="libibumad" arch="x86_64">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="5831f5e1cf6054584491691a5bbe7979b6fde41dbc576960dd7e0687132694b8" name="libibverbs" arch="i686">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="9cb52cb30e8097e7edab86becc3adab15ea208469202aa9e636fe170b6d52100" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="f5183b7f212d09bbce428b3341bb18fe00a3ae25e675f3fb13fbb4b44bae635c" name="libibverbs-utils" arch="i686">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="6c058908ee8bb91674cf3149237766f08618b52ac6e1ac3820d1da49fcf42075" name="libibverbs-utils" arch="x86_64">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="6b9e47b5004f4760e776341280598255d7c807bf1e472975aff488086ba3ddd7" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="98ff9a8544bdda1a3cce15bfc028056d2f7c81c22b3e90281f2ca53d87075675" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="b7875bc9977af3fa425097adb476a262c5cb99b21b9a6428b0e14b42df79d86f" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="c3e04509b7e905bcd26e1882ce9990521ad80ffc734ec330a2e9e3f77c2093bd" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="7b2ceb94ad373e1f26f2e3d89c8617f10710bee8c8137b8963dc578858595022" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="5745b28f3729b69c0298b35fb1ffb7f25c228fc8ff85ff203d44f508cf147c6c" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="37e000d9c7303474b4f213c4780e2668f847ae953e2a63bff02253db06ed28af" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="ab2c67c1e49cfba68b386621fca2593ae857df1f5d88b3bf2beb48ba6107b6da" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="1baaa917822cc480c78a41080401691366670ee941b16037c3721fb61ae4d8b1" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="315567955a54d1025bd6b19b91a82a3a42860efc9b8484943f964833faee7f0d" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="3bcba82ad0c4256b03c3706a6e090e98c73275cb2856022837353a975657309c" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="b6ccd8f3574278d3e31044ea4e0e1050cf763fc254414a7f0c2a7377dca1e7b4" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="a269a4d6d754b2e372f4f50c397061107139384c67ca13748df5a4240ce8990c" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="0ce6ca9df3c4411ba8750af1750c0a1f72b32cc9114c4a045c3b1b6aff067806" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="e40f3bc2159880aa0f12ccb0677d7215466671ca55be1c6220cf38cb42fc5203" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="1dcabb118859ce057085c4ec514476a02d1287f3f2eae1378a15d03339029785" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="079f7c0e6649d4bf6f10bf5aedacc6405a4e30378234bec7d65e979f8082629f" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="5bd7748f260f4635568d39df4ba6cf73a8638a5e8de331937d9cdc6d0c387b40" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="650b3bd22df6e0f89a4583f8c8f132786e21ba86ede7df6351136e6f58931132" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="65551fc79888dc4bf9db4a9a60f3757bd4638f113f8072c030190acb2ef3d693" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="6c47b5026ff4567a165ba668e4a76acf6a7caf44f4e4736b42f465f886c9c5f9" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="a81d963af1a725ea5d26765e02a5eae6c90628270ceade1721a66fa97f195e14" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="2564f20a19d4bcf20ab696572755e3e0614846180c1035c8352b44a8b8fa1ced" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="e9a0fe4613c18502c8560f31f762cf2f9807342ce8d600af9aebd16541bb6132" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="8cb4d433923d40f970a2f5c5b3f856aae21312108dbf5cf5c4a66f76e4725cd2" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="6a590841a4293329e3fb4e1da53909c453199f2ce4718a5cbef71b5dbdece720" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="5f34ad05df7074296ec6543d6d381f9cb2cff910f930959fa1eb2f7f2da45f34" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="af7a4a89d8b1ccaba2ad0e10ece90c7d44c63ce6dbd4831cacb50da07c84c950" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="5a105984c7552ea58ea4efd1e843fc1d9cd0d59cf6b52f485be08468ce0c79ae" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="37d499bcd83d680f99c2b569b8025cb7b51ff09332652365209fc7c04c433a8c" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="3c45890ca3a8783c50828741715d177326d591b5a0d5e81c658aabce37dd3ab3" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="950d622fbc65c5b979a484270564ad809bf2da9d21682843f49aa69651e90873" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="17d9ca68e0d7dc6120547b3212ffffd0cb8930ba6516b1ccb133e2fd48f68c93" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="7ad59d5c11fbde65a9bb4df334a3035b4cca4783599b109d74a06d40c999a39f" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="fb69ed1a5c5f43e50973f09860774a706a7cf03455009021c0891d15c7650421" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="de0ad14c63d93153e17fb20a58f616759b6b332f35d890e130447c2ce4549daf" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="80084f501642ce73eb4774c5fcd642b4fe704391469e217994443685e5f9ca15" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="6b9dc3c2e2500a67e1127c6e183dfce3f864e41095d47d7f0f38b67bd83f8893" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="f5de1f928b99a4a067f7be8ad12ed188315079ec63d5eab24ac87881f38eb884" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="a364cdf91cac4fd8920a8a91317dcbcc3cc77a5ccaff8fddf418bcab68ddcb98" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="0e83a4a9a0817720c881f8c48460f2c0ecfeeed97947251b59b6c5972aced5e6" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="584422456a8332f0cfb48070a3b435677575f97f10736bcacb130cadc790e328" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="35e7efd471ab7f39f5f404ab75b4e9ea46b23a24d79e237cd339200ac26be732" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="6377478884d0c12b5fa7959b74c5c9fa2e629ed56a1354c526959a2796b80435" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="c7df55e94e8674dad96e86fb29756e8d418a3701ffdc9f5f717ea4cad68a44cd" name="libkadm5" arch="i686">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="50d922750a9ad9a95f03c3f9bed0a918a4b0b21f90d8c65c51d62b798d75b594" name="libkadm5" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="50.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-41" date="1564401600">- Update man pages to reference kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401601">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401602">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401603">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401604">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401605">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
</package>
<package pkgid="a80353787ad9f4faf3b8fc11d75f19e2a462a119d37d836aefa04e8356179fd9" name="libkadm5" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="16da0585dda366210bc2c97e98f7baa36db1744769ba94022847c7ce47a3bd13" name="libkadm5" arch="i686">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="6d30d915856dafe005403bc7803cf306bb1159437ca409675006e0ff5ee61e73" name="libkadm5" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="0fc6210677cf8ff9f9f6fc919a21d46e1a7cca2879d5e864ae75c606afa6a518" name="libkadm5" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="c7e1bd5af8b532fffc006c025a2976d27064e59a8cf50fabbc593dab2726c947" name="libkadm5" arch="i686">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="f0656859036bad8b0fb88833af69e608396eac4f6829e49c0610255c2e4a360e" name="libkadm5" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="fb8a3fe43cd0f97cd3fc926138bae26ced521064b03d5cd704f671929bce1b1a" name="libkadm5" arch="i686">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="ac11334a65b5519ec26d490d6829b3b6098e473cd77fd3024cae5c9a1b17ba5b" name="libkadm5" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="ce6c65e634ef32888b1972f7391562f7e99b6984e04c2a5ddc9d50397628ef41" name="libksba" arch="i686">
  <version epoch="0" ver="1.3.0" rel="6.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 1.0.8-3" date="1307016000">- libksba-devel multilib conflict (#601976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
</package>
<package pkgid="a8327b2498aa460094da509f30019ffb5b0e4c1eb6feacb8b9a918faadcf8138" name="libksba" arch="src">
  <version epoch="0" ver="1.3.0" rel="6.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 1.0.8-3" date="1307016000">- libksba-devel multilib conflict (#601976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
</package>
<package pkgid="ca9ea43b914741984f275f0e4673f249000d28e5622db8a883b1ea095a32c7bb" name="libksba" arch="src">
  <version epoch="0" ver="1.3.0" rel="6.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 1.0.8-3" date="1307016000">- libksba-devel multilib conflict (#601976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
</package>
<package pkgid="90aae3d9894dc7eb2600dc4fd2d2f932a2ecd81718a222d78676cab8fb2b59a2" name="libksba" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="6.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 1.0.8-3" date="1307016000">- libksba-devel multilib conflict (#601976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
</package>
<package pkgid="60a4b73444a83291c110373da64ce0818c141bebe8acff40dc1e82cb3ce0d3cc" name="libksba" arch="i686">
  <version epoch="0" ver="1.3.0" rel="7.el7_9"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-7" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="8704703dd7899cfbe70e54f9cacf4d106baf7de84dc0a7ac0ca705121fe36992" name="libksba" arch="src">
  <version epoch="0" ver="1.3.0" rel="7.el7_9"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-7" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="174afb8aeeac9e0a0b9cda9f5bbecb81cedf22d2ae094f5a055b19cbda5c1959" name="libksba" arch="src">
  <version epoch="0" ver="1.3.0" rel="7.el7_9"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-7" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="bd3d35a58b0034709c9f9f0cb5e85458b5a933b95299bad8f43ab45ade33deab" name="libksba" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="7.el7_9"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-7" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="04d5454b3ecd01a3fdcf89d6140a64778a6e8b54880f04f87de130327398b310" name="libksba-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.0" rel="6.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 1.0.8-3" date="1307016000">- libksba-devel multilib conflict (#601976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
</package>
<package pkgid="1f0b8b277ad5b566813f685a2cd97669937d21ee5b2da8b4f032c73cad54459d" name="libksba-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="6.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 1.0.8-3" date="1307016000">- libksba-devel multilib conflict (#601976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
</package>
<package pkgid="3744d1a4541d103befee18b3ee0a10ae850d70c4a732bc0e120e0b16256d06d9" name="libksba-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.0" rel="7.el7_9"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-7" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="ecc8165ce657e4ecacd1d086de71c7f794a26047f89fa4e4d3077197a47dc031" name="libksba-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="7.el7_9"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-7" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="2f47f72eb35ff39b72875161b21510c441adcdf772f8f928d90bf7d900a7be6d" name="libksba-devel" arch="i686">
  <version epoch="0" ver="1.3.0" rel="6.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 1.0.8-3" date="1307016000">- libksba-devel multilib conflict (#601976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
</package>
<package pkgid="566fa74b9fa8d78c30f7bac325806b6389618fd4035e7e517df4d916658f1834" name="libksba-devel" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="6.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 1.0.8-3" date="1307016000">- libksba-devel multilib conflict (#601976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
</package>
<package pkgid="0e88c92886aa86e5f700dfe7801fa306a8675e3d3baa8f4351e4e1dade0534d6" name="libksba-devel" arch="i686">
  <version epoch="0" ver="1.3.0" rel="7.el7_9"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-7" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="8ac7dba68f94ab32e1e6249f463f738fd1409551adb70bf95d203fa6bd082e07" name="libksba-devel" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="7.el7_9"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-7" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="8b2171a57b286f0b5e96271f5ced49c146ecc236547f9464b8dda4b7acc5b554" name="libkworkspace" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="ae596b89d6d03f7f2bb545c548bcd264427e5872e675fb9a78e78f0b1369f44d" name="libkworkspace" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="c43902fe054322acfadf41d976641b7ec4c730c2b378a9c96d587d6c18a4f2b5" name="libldb" arch="i686">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="9da8e58b9e968a12862d8178ca337104cc3e5af2cf7c691f7479940b1262367d" name="libldb" arch="src">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="07c73f388cdfa90191404c09a2c0ec40c97f453fdc203beb9e580a1338315887" name="libldb" arch="src">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="c60b17c2c6120503876530c64b86ceaac2ca2d4626c98731dc2e2b9cbc081c2b" name="libldb" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="92eb68acd6632f35151ea53d67f0b1b2d44d3c3b0ebbe80f202121e667626c7c" name="libldb-debuginfo" arch="i686">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="e0beb3c8397ad5bcfccb24546cd1a1509909b720c97961851c6c02f30460ad30" name="libldb-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="243fac2481a304a129acbb5eb579a41f4246924d3cbe3af212f624fdf8b857d5" name="libldb-devel" arch="i686">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="536a31f574ddee69e07d8ae044a57644c7eac51139b3a7425ae0369ce6061b53" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="cede6d3b7fbdfd4da18f4fdc834450308621159e4b2b5b2d5d464c59c9eb1a9d" name="libmount" arch="i686">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="8ab19203c6ecd0946f7303f0a8d6e46110851adca11003be2763993b487298db" name="libmount" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="3de650dd401e3a562f40b8ea331edcc6c7417cb585a39d84a2673bfbd1aedccc" name="libmount-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="6e92a0df112fbb5828152340d571205d6523ffdb243a195115ecdda96764c7f7" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="4044256eac75e6081666b739b34ddf7cc4b8303380ed041d85054c7c06226599" name="libpcap" arch="i686">
  <version epoch="14" ver="1.5.3" rel="13.el7_9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-4" date="1417521600">- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-5" date="1427803200">- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
  cooked header is account for</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-6" date="1434456000">- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-7" date="1436356800">- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-8" date="1442318400">- make sure that sll header size is accounted for (#1176612)</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-9" date="1496059200">- Bound packet size to 64k</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-10" date="1502798400">- Add support for AF_VSOCK</changelog>
  <changelog author="Michal Ruprich - 14:1.5.3-11" date="1508241600">- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad frames</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-12" date="1563969600">- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet drops</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-13" date="1646222400">- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr</changelog>
</package>
<package pkgid="58c00cb8ce41553353b74903c691dfe5cfdf8261f5781066d958da16835546d8" name="libpcap" arch="src">
  <version epoch="14" ver="1.5.3" rel="13.el7_9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-4" date="1417521600">- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-5" date="1427803200">- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
  cooked header is account for</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-6" date="1434456000">- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-7" date="1436356800">- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-8" date="1442318400">- make sure that sll header size is accounted for (#1176612)</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-9" date="1496059200">- Bound packet size to 64k</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-10" date="1502798400">- Add support for AF_VSOCK</changelog>
  <changelog author="Michal Ruprich - 14:1.5.3-11" date="1508241600">- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad frames</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-12" date="1563969600">- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet drops</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-13" date="1646222400">- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr</changelog>
</package>
<package pkgid="71e5b57ae6999fb476498d2e8f79491cdca4d8fa4738b5df981259e03b3db2cb" name="libpcap" arch="src">
  <version epoch="14" ver="1.5.3" rel="13.el7_9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-4" date="1417521600">- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-5" date="1427803200">- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
  cooked header is account for</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-6" date="1434456000">- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-7" date="1436356800">- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-8" date="1442318400">- make sure that sll header size is accounted for (#1176612)</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-9" date="1496059200">- Bound packet size to 64k</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-10" date="1502798400">- Add support for AF_VSOCK</changelog>
  <changelog author="Michal Ruprich - 14:1.5.3-11" date="1508241600">- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad frames</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-12" date="1563969600">- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet drops</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-13" date="1646222400">- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr</changelog>
</package>
<package pkgid="8b5e88ed3848980b396add3a1484512ccac9c059c2e80e0e3d39e360091de31e" name="libpcap" arch="x86_64">
  <version epoch="14" ver="1.5.3" rel="13.el7_9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-4" date="1417521600">- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-5" date="1427803200">- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
  cooked header is account for</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-6" date="1434456000">- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-7" date="1436356800">- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-8" date="1442318400">- make sure that sll header size is accounted for (#1176612)</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-9" date="1496059200">- Bound packet size to 64k</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-10" date="1502798400">- Add support for AF_VSOCK</changelog>
  <changelog author="Michal Ruprich - 14:1.5.3-11" date="1508241600">- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad frames</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-12" date="1563969600">- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet drops</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-13" date="1646222400">- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr</changelog>
</package>
<package pkgid="ca002f669cfd18f13836c29606a5d1cd066fddc8cb5d38fc865942e8a816a64d" name="libpcap-debuginfo" arch="i686">
  <version epoch="14" ver="1.5.3" rel="13.el7_9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-4" date="1417521600">- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-5" date="1427803200">- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
  cooked header is account for</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-6" date="1434456000">- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-7" date="1436356800">- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-8" date="1442318400">- make sure that sll header size is accounted for (#1176612)</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-9" date="1496059200">- Bound packet size to 64k</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-10" date="1502798400">- Add support for AF_VSOCK</changelog>
  <changelog author="Michal Ruprich - 14:1.5.3-11" date="1508241600">- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad frames</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-12" date="1563969600">- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet drops</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-13" date="1646222400">- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr</changelog>
</package>
<package pkgid="616ba085edae86bac6c29436bd9ca8fd6d6d85996064d4033ebe8ea1d42de54a" name="libpcap-debuginfo" arch="x86_64">
  <version epoch="14" ver="1.5.3" rel="13.el7_9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-4" date="1417521600">- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-5" date="1427803200">- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
  cooked header is account for</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-6" date="1434456000">- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-7" date="1436356800">- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-8" date="1442318400">- make sure that sll header size is accounted for (#1176612)</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-9" date="1496059200">- Bound packet size to 64k</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-10" date="1502798400">- Add support for AF_VSOCK</changelog>
  <changelog author="Michal Ruprich - 14:1.5.3-11" date="1508241600">- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad frames</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-12" date="1563969600">- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet drops</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-13" date="1646222400">- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr</changelog>
</package>
<package pkgid="ec533856b777f55053172f079efe8a88953ce67f98b6ea3be907337b8de5aa1c" name="libpcap-devel" arch="i686">
  <version epoch="14" ver="1.5.3" rel="13.el7_9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-4" date="1417521600">- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-5" date="1427803200">- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
  cooked header is account for</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-6" date="1434456000">- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-7" date="1436356800">- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-8" date="1442318400">- make sure that sll header size is accounted for (#1176612)</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-9" date="1496059200">- Bound packet size to 64k</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-10" date="1502798400">- Add support for AF_VSOCK</changelog>
  <changelog author="Michal Ruprich - 14:1.5.3-11" date="1508241600">- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad frames</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-12" date="1563969600">- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet drops</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-13" date="1646222400">- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr</changelog>
</package>
<package pkgid="e190f521e7d72594a5b5a9fc4da6bb2a61a108c6ead80655e313c053887830d8" name="libpcap-devel" arch="x86_64">
  <version epoch="14" ver="1.5.3" rel="13.el7_9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-4" date="1417521600">- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-5" date="1427803200">- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
  cooked header is account for</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-6" date="1434456000">- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-7" date="1436356800">- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-8" date="1442318400">- make sure that sll header size is accounted for (#1176612)</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-9" date="1496059200">- Bound packet size to 64k</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-10" date="1502798400">- Add support for AF_VSOCK</changelog>
  <changelog author="Michal Ruprich - 14:1.5.3-11" date="1508241600">- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad frames</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-12" date="1563969600">- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet drops</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-13" date="1646222400">- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr</changelog>
</package>
<package pkgid="96cda8e03141b22e6b1d585899130fadb114ef90601eb2f01b2e429918617cc9" name="librdmacm" arch="i686">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="1357c345d09350b8dc6cc41ec5676d26501b9d36e7c76cd80e15fb757f157706" name="librdmacm" arch="x86_64">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="8f3c40e6e5d8d6b2d38eeace303c13575f83cfab4ddc1a5e6a4f2b8d5ac0452d" name="librdmacm-utils" arch="i686">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="0f20961453dcffc73b3ce2032027e7559afaca9c3558504872d96ab99577eb4f" name="librdmacm-utils" arch="x86_64">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="157990e3048410aab35c7d509ed5ac954f0a493ae1eff0e7f4a2c05765c6ffb6" name="libreoffice" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b9d3817b7f8db9369e01465288d616fec269a59aa9e77d82be1d9471ffc9ed1d" name="libreoffice" arch="src">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="bc1b8307cd6828728db562b86953ffeb0ad80329891ea942cd97465fb8bc8031" name="libreoffice" arch="src">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ad708894382940ad9c3522d1f625020835273997d9daedbc5085cf64d173f67f" name="libreoffice" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="dbf91ce6db579ab387d13d1b5a9a8c0d6148730f55545a32619b0e319218a013" name="libreoffice-base" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="e7c8a667a57765728f0a9acbdc058fc42db6315696b8bc9402fa695835c18927" name="libreoffice-base" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f471920d029f824ea183440ef253b315bde153d7dd6e60c6782a83c3801095b8" name="libreoffice-bsh" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d14a99113da4bade5ad93b5e917f8007ce61a3c08d3f0a50ba1521cdb0d179b8" name="libreoffice-bsh" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ecc87c7a0263c59aa84ade58a19d13b559b7ceb06c92a9b5541608b8a840c769" name="libreoffice-calc" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b8dcecca3ff6e0ff8b1b26900abd063dd1e4cba70d296246724f2b58a433cfaa" name="libreoffice-calc" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="14e8ee385ed4040755b99e003790f05ea66e8f503b0ee07098d2143fb4d697e3" name="libreoffice-core" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f3ef9a06201b5e82069c13a56c45e2ab0b75196e34ce2a58edddfd26ff0ac3b3" name="libreoffice-core" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="3eff91375a7c70252d177b914b1aec449206cf8b3f30c533049e66d6ec7e95ae" name="libreoffice-data" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="546c1ccdd584b15447db477e210adb8ad9167b9191c48540d56f6c433726cb17" name="libreoffice-data" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="252cf553aad46dacbdb1d8c4b453b3a0ffbc318a5051bab6cb7077cecf69eedd" name="libreoffice-debuginfo" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ce333fd2e8e2c904321865ed3f8f13736b228399917668f9acb1a713cca0ba8a" name="libreoffice-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c7baa154ed0782c7b74448731d03793bb1a727ae0138fe5215bb12c0ca1beb57" name="libreoffice-draw" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="bc3751d7297f9a56fdca746bce7cef17ed7f94150b19f5a11404b34f6827c7b7" name="libreoffice-draw" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8a225f1008342e587f2d59e5d54e1ad89e40c9bb9bdd704bd9d66b885cde45d6" name="libreoffice-emailmerge" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c211b3e65f8c7448ea62299d0900717956bf35723b80d8d5939fb98c2fc85cbe" name="libreoffice-emailmerge" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="464251b4005bdfde29224cdfb482c46f94592a49325011de3f8c410b3c2f41f8" name="libreoffice-filters" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="657b60e6dfda6895d85db8f7a02f3db4634472ff6838f13fc82b65c19de006cf" name="libreoffice-filters" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="662715e57dc1f55f433aa4d45046918bd9c486793655d6dd5792701727ad93c9" name="libreoffice-gdb-debug-support" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f2a1536c0cb8cb468ac76ce4c7ee8bc2a5bc11b7b94eaf4bca7e63b43cf2e5da" name="libreoffice-gdb-debug-support" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f95378b74981b7517a753b98378ef7b57f0a128a2a0cdd0801119422ecb6bdbf" name="libreoffice-glade" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="44de3164afa544bf3d228ad2a97a1e8f9cd3a09c2a9b508c3949e37c167659d3" name="libreoffice-glade" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="5638772b12b44e444d80cbaf9a2cff32916fc0ab0c9bf2ca4d6024066a4c7f4e" name="libreoffice-graphicfilter" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f03a4baf8982459e4fccdd765dc0ac53c31c0245bca99b61503ef2a38cfffab9" name="libreoffice-graphicfilter" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="426e7f6155122216f86f9df59f3b3129f34a606a1f6102fd39e903ba55394960" name="libreoffice-gtk2" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="0c24b7b4e611cfd5ba7ab2a3232a2c0d700218b90fe55599a7ccc9398df6f97c" name="libreoffice-gtk2" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="49246b05c77e1c80b58b5f260de00a30df6dba943470b3587b6a44235225552b" name="libreoffice-gtk3" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a1f0bbfa62dd9a628a81f6789dd7b7379baac217528901540f9205ab8504f870" name="libreoffice-gtk3" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="931ff2d253cf23c08708da57a2d7524ecf0040c02b53821df1ab6dcd488cd49e" name="libreoffice-help-ar" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="655018ca68de882490c50fb99fd00fece0a36443dd936612822ee86350c73ea2" name="libreoffice-help-ar" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="e9ea5d1491578f536285ede4b9d41e9e36ead91e75f6864c63f105fd30707d21" name="libreoffice-help-bg" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2407f6c6b65cc42e2baa24039278602c457c4147ce1c95b5f9a16d0e4ef8da92" name="libreoffice-help-bg" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="87600209b1369633a493bd1942b476e25f2ecbe9990088120123aa97b3e8d95c" name="libreoffice-help-bn" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="538b012d98e37b21a4e8855177be3fffad595f345a0d83a5e5ae386e692099c1" name="libreoffice-help-bn" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7c981f906eed2547a386226a55320831e7c69648e0f8056e067966085d1bfec0" name="libreoffice-help-ca" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f2ac5313aa7fef23219efa32d53a898b3aada3e337d4a88b80e28907a41d348c" name="libreoffice-help-ca" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="6bc20e847cbaa546d0a3ce8e0c15d307817261fca7a18eef887f26297c964e18" name="libreoffice-help-cs" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="0f3d4ec3f46772611d5229362b3f0ca5df8241f32228c4541674dc036fc86d03" name="libreoffice-help-cs" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="87f2a9b90a0e2c616ea0a49da628edbbd25720b0c2910a5d16af73d441433745" name="libreoffice-help-da" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7a31847d4c60b03e161bc13e8dd8c67ce1c33de3f0f1005fc775bba99743cea3" name="libreoffice-help-da" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a629b7e4232af08663aa93a86549565284982c6d90f686d5447056235e208f69" name="libreoffice-help-de" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c981372fb2aa43a39610775a936c05eeed6577ba882652b88e37cac1010732a1" name="libreoffice-help-de" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2daa44c6348599caf2ac546a39b9c9ae7b8fad5e0fd194d65bf51858f796fa39" name="libreoffice-help-dz" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d70298263701ab106d0bb6ed6f84e8e364cdd632bc310c6c7229deda55803571" name="libreoffice-help-dz" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="9198250425af36482411517e740000072e7d32ca48703ffe2ce6efbf1d525658" name="libreoffice-help-el" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ce7ed949d007515e696dd90d1438a3c09c6af29f0b13f60e432da583678833ce" name="libreoffice-help-el" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="21fa47d1349a75f2de77508f6a2f4bcc8940ef94b15f630586386c64fb906b2f" name="libreoffice-help-es" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f6c111b37d00b9aeaaa85e9c66486eea9eadb9f72fa22070d81703711708178b" name="libreoffice-help-es" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="bf8a26c066cba0c4aa738b70cb907b910de1c92de644cd61252f27493395d33c" name="libreoffice-help-et" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="e9a829f8428615ab6873c4137f7658fdd07d52535e3d0ffdfe24a99fc77e0a9b" name="libreoffice-help-et" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="698efd998e15af64ffdf4214b87f967ffc276adf1f6a7964748fe7dd1c077237" name="libreoffice-help-eu" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="e28e3af5300858b325fd0c36a603260d790448db939376aeb4a88aeb3349d303" name="libreoffice-help-eu" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ef12423139ad69abd809ba2cf5dcc3983221af70a764b4cbdb7832f6ba826cd9" name="libreoffice-help-fi" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ab8e2bc5912f0dfd5768276f92a7fe5773b20bee7dd0deba5f7962b8b77ec4c1" name="libreoffice-help-fi" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a43edb5700192e549fa8f3b51f8b4bd2214a9f66760ec2a8591a9ec4436faa1f" name="libreoffice-help-fr" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a6a95749262624ce7848d594ce140cee2220ce29cf0fde657ff362832719f7cf" name="libreoffice-help-fr" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="231be563bbda65b022594a152672e467740f8d4f146e69a70b3b9fb8094b7466" name="libreoffice-help-gl" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="6fd84e95110e6ca6c686e66fef83fba6f1729fd5d75a4c2cd7a69b0b8b778a59" name="libreoffice-help-gl" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d42e641ff9e7f7f7a797c975d32224cc4d8bdd63207084c3d1b5e89cd9b2d2d1" name="libreoffice-help-gu" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b3fe5ea3808a66ba7859059a107e358729a9f3e8eeaf81369a51295cceb51b7a" name="libreoffice-help-gu" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a1e9c0749831b3e4f5956d6bcee43a253a4b13315a4f8f9bead8be39d0ddc116" name="libreoffice-help-he" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="3901a7ee92d70a1819d532ad48300e20fa944772c8046b80e0eaddba97f26cec" name="libreoffice-help-he" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4eb28c1fbc6547d672457d524c62aa89cf7f5c7e5e94688a6563b5b31ab44b50" name="libreoffice-help-hi" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a5aa9a8c93f722a2a304a0dd80f112e6cd1cd401fafba3bedb350847bfabafb5" name="libreoffice-help-hi" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="5e5cc77585faf9dfef142407edd20397926b32304af20c845ac31fb63635f21e" name="libreoffice-help-hr" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="82312df7e9b8fc4c3ae559b10f35ff5b8e79688716d1e2931b4c46ac49fee353" name="libreoffice-help-hr" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b6ec2c8cde3d6c0f36d5344b52b02dd412cbaee4bf8f2f392f1f7e6b088f8d18" name="libreoffice-help-hu" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a6d3f59bce4cd0425be780844b092b2bd3a6960553ec8d4620c92db582e72733" name="libreoffice-help-hu" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="449747e36dc40a71ad2ca5596391789fc4c8043632f7a19bba786bc954884d59" name="libreoffice-help-id" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="5f9e196e1ea8501366f9874774a5a7f96ada113516a7762b5b54095a1eca0848" name="libreoffice-help-id" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b95ca02f97d1f9138a3a2c1a993ee3d74c16229c29636caccf40d4f58e4a90f6" name="libreoffice-help-it" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="07e88881815655178b7b2bca5b80e7a301bd4fb5adc0323ab6f03e9332172d31" name="libreoffice-help-it" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="341035514fa23ebde4e0444e25547a0523abbb7d6550c7983800975f36a253f8" name="libreoffice-help-ja" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="020074b21bb0b97ba793305eba6b557e920054e9b6b79f8c18d72e7ff357093a" name="libreoffice-help-ja" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ddf8160c55aa72deaa180ed967042f78765030f5684cae687794c8bcb9a5c2d0" name="libreoffice-help-ko" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="fa55b9e284cf364aa3738970014d1ba91548d761bf6f2cc3a7c4b28933c34cfb" name="libreoffice-help-ko" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="17cb886fbc51b9870cf06a9e62bc18d4a1978aed7878c7fa965e2002c0927264" name="libreoffice-help-lt" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="1499183341c1c73c4c523c291bdf62ce25a614d7adb8782cc89cc02de51bf32b" name="libreoffice-help-lt" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="aa9acbe69e55ea2b0f41533ed86fc38ee531d10696fc443a2b5472ea631bb270" name="libreoffice-help-lv" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="09ec7c1472bff03cc901e3078cecdd34059adfa5114d2a1934589bef06fefd6e" name="libreoffice-help-lv" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f78e555e0d4e1ad4fc5cbfe2a7e23dd070543b2946980180484311608b4b8f5e" name="libreoffice-help-nb" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="0e42a86647431dd1f06cb9c79aa0a95d77929df75024328f7e9b9696e1f86d68" name="libreoffice-help-nb" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c077763f6f68641d3ae0bdd220852b5955ef85d11e35c469a0eb1d4308115d8d" name="libreoffice-help-nl" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ec78132bc2226449744328cdb3c99ac5764f055fa80bc893bbd834ea9c8ef4fc" name="libreoffice-help-nl" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="809b0600a94d6aea98e1d8d8f6ce0b6b3bfdadf141f67a7185a118abce0ffd95" name="libreoffice-help-nn" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="1e1a1b7e4c3b21f0aa24fd19042dee1a21e45f27c255ee09a8835183393b8e3d" name="libreoffice-help-nn" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="cb0836f46d8f1666cfc321f96ec273bc964780288102760ea8f6c03c9f5e7597" name="libreoffice-help-pl" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ae7ebcc2aa7bd4b805d810280812bcdbb840ee7c46b184e344a38e18ed8f06b4" name="libreoffice-help-pl" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="cc3fadb104aa8c42e270c7ee5f596aa03f1aa5fa550fbc7e00dac9d921378693" name="libreoffice-help-pt-BR" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d254c241f66608acaa20e5486ec77cee5fd6540d1b4716da65688f7d3ec7bf0c" name="libreoffice-help-pt-BR" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c70e948110e77952ea9f1eb71e9e431800b3e86f073da9c62605c77c57ffe087" name="libreoffice-help-pt-PT" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f7c8c0c28e3df7cc2505b174fa08da4be88718c3740f580ba7247e96d297d843" name="libreoffice-help-pt-PT" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="e0df9357e9388644a78fee0882f2225a565c824d64902583275b145bb4c75148" name="libreoffice-help-ro" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="97418aedd994b4c4b1018370a258fbc76649be1f333c2e27317abca93ff5b894" name="libreoffice-help-ro" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="78ebf19a353c8bfc0ed3cc7141713fd33066704edcc1e6e8de60da881964ae2e" name="libreoffice-help-ru" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="415fc1ea43f3db4b7f506a83251bf325ddda35529377fabf02c8d54fb251f2e2" name="libreoffice-help-ru" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="eab49c9f0771d2f22d4fe383bf58c098e511b072e6448f654e953be777d13186" name="libreoffice-help-si" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="08efa3949a3d3239d0aefbd5cbc981830525533e05f4b9e7b0bbe03c47796a43" name="libreoffice-help-si" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f7ef815bde5fc5b27f4109d46feda68ec40d2ba74d3969ef6e737230709bfdf2" name="libreoffice-help-sk" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b1c4a3728e3c7e80ca8763ef8d7159eb6708cbd887ea1bb3253e20617606d663" name="libreoffice-help-sk" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d8a78499302c2753993a2bdd027b1fae88449a1c7a589612264cf1f18830b99b" name="libreoffice-help-sl" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="31a832bae47df20f26ce3176efff3702fbd87a99276c06163cfc8639b65344d4" name="libreoffice-help-sl" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f81c003c84fd50a82f85bb284ab74720edbf31e25f1b5221f921a8d13e607f3a" name="libreoffice-help-sv" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8a9d463653a9ba32f6e160f32dd5407af30ebdbd3c157d7352d04d651af1d31c" name="libreoffice-help-sv" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f74c39cd87229f63bcfbdbf81423409da54c6d43084fa6a6c0b48fd6781f2bd3" name="libreoffice-help-ta" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="301a602b3cbd3738ae4a8d7f090b85eceeff3aaa0a49e7bdec1a049c8ccfd518" name="libreoffice-help-ta" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2c4d72c8fa5b112e52afaf5c53c02b389c92a1ca07cf49873e5fb2b96bfd194a" name="libreoffice-help-tr" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="75152e1c98e128801ee03b49806bfa7b3ca14cdf70b9f45de5f6060acbbc57bd" name="libreoffice-help-tr" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="3fb8361f5bed580614d3f88a14a4ed4dd0e4e64297bbe6d02c01b4637fa0fbfc" name="libreoffice-help-uk" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="5640e4761ad417c94237470e6defa81e855e50a73721c004697d3fb6e901a9fe" name="libreoffice-help-uk" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="11e99aa4d4dfc9e36738b262be18c0df68aa405c5cc93e91dd0a9241979e6ab1" name="libreoffice-help-zh-Hans" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="94c55c211a4ce489bc5f041d0cb0af222a3da3e1d594b7fc0ff0e4b1da1345b5" name="libreoffice-help-zh-Hans" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f88f5c8d9fc23514ca3e154826930c3a4c29853451f41ebe750242343a27db20" name="libreoffice-help-zh-Hant" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="26e9e9feef5a7eac7846191d2d1e85b1e37960d6f3d6c4cdbb6b19499a74367a" name="libreoffice-help-zh-Hant" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="6ed1a58c1de0dfbb20c212983430c3c94a90e2620f4edc4e0512c5845936910c" name="libreoffice-impress" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b2a695b79b0cab15d111b51bde9d89d6b71858e206c1f1dbd34819a1703a1aa3" name="libreoffice-impress" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4baee3e1cc529c86f32e4aafe429182e7eb7335dc181ab5e03369d901732d8f2" name="libreoffice-langpack-af" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b1fadecf01fc1bedde2d1f2659efc666c4f44306fb855f4b70ed1a80660d14ee" name="libreoffice-langpack-af" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="319ddd9a8686a5798622b0e11c7cd195a3c18aa640541449fd4aa5f921794a7f" name="libreoffice-langpack-ar" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d8cec53f9688ae7ce952771f15cc9f036e72ae2299af495929c72a2e868f86b7" name="libreoffice-langpack-ar" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4dda5dd2a5045de8254cf7d32757c7b53120ea281ced90f910f3ae6249aa0418" name="libreoffice-langpack-as" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="fc71bfdf945468afdc67fdd4cd28da439ccc5fc7cf79b0e9b31413d1eb58a80c" name="libreoffice-langpack-as" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="44e8b0b370bc6f6358786503733e28ffabd1034a6771095af6a4ec1c07fccd84" name="libreoffice-langpack-bg" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="25522c9b9517f11f2eef9b2f21d1ed771265d9e1a55fbdc074b8a0635467124a" name="libreoffice-langpack-bg" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="1a5de3dd3a9acd44b32e8ae136e6d78f204e7ff30e167bf5375daea1f5b3ed97" name="libreoffice-langpack-bn" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="65b16bc30be4aefe238682fe1c55b119be6dc6e967b50a7b7b6accc3d47d56d6" name="libreoffice-langpack-bn" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8d822352f3d11779a1a792ccc057b28c1a35e61f8be84b01ae294ed7689c9907" name="libreoffice-langpack-br" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ea3738cb1a7e05ddce9e7294567980772e51fe994c7cd0d2272beed0faa550dd" name="libreoffice-langpack-br" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b57a6fb22e065ebd0a98e87e478a2c30cf0a2e28b2d4de82e82ec38aeb2c9c5a" name="libreoffice-langpack-ca" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a2ce13362058f43d25701ff62fd3c7b8b388c7635615406a22fab4dc09ad39ae" name="libreoffice-langpack-ca" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="16922b70b34c934f2417cf22426f62ec17570ee7f21cbec114ccd625a736ec6f" name="libreoffice-langpack-cs" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="1cfc310c43c693a493a036c9b225d1196be76331fc08e9342a4f7b18e492d78f" name="libreoffice-langpack-cs" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="826579bb63fc0aa1f202e4b25bd962a18d6ae8b5d13ebac16faa8a42a6f6872d" name="libreoffice-langpack-cy" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a28caab38dc2826ed5490b2a9980867405e560985cd457de1f48924a2eaefb9e" name="libreoffice-langpack-cy" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="77aa5a8b99baf414e51b16b66c55457b9ff9d30ad4f9f4a8718e99f8947a4abe" name="libreoffice-langpack-da" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7f04a9184fd277f4e921bf02e479325f1c7aab9c7026a3006c54f37f750c760b" name="libreoffice-langpack-da" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a839722f115b9578e0432d10c500733d72b26c735f606ceecff5587c5b805ea4" name="libreoffice-langpack-de" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="9dbf5369d31b43155a69e01f84d0e618e9d48c7fde07a910d38534f85ef67baf" name="libreoffice-langpack-de" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f4c33bc88c13b47d0a6d6703cabcf76309bdda15ab390792803816d49884647d" name="libreoffice-langpack-dz" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="efaf60adfb781704d1ce2a5b631daecdbf1db5152f053278f539752200066a25" name="libreoffice-langpack-dz" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a8d07e3e8b8a954080eb05226ef74ff8e046e0d956b9909ee6a4dd52df55cc22" name="libreoffice-langpack-el" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b9e6617eeb2c9ed508ddc1a2995c81873e6d0e2d21bed57e4076ccf013055dbf" name="libreoffice-langpack-el" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="da81912fffcb154a4e121b4e073fe2636b72e6f7ae8342e50f2fbe06270f84d7" name="libreoffice-langpack-en" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2749106be901f9b5366f9f31ad2ecdb62ec2e981e1e720728eb2cda3a0b4a1d8" name="libreoffice-langpack-en" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="80167acbbf10f9c0f90570d7528dbdbe13bcb3249f2d6afedd6da85ff144df68" name="libreoffice-langpack-es" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a69f9f86d1e1fa25fc49e489648999ac4f4b9a13112b9edd08897aa37f21b178" name="libreoffice-langpack-es" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="035946a99909eb8b3f71b085c69fe0ae8736e3f1cabc1ace784d2a0fb97be993" name="libreoffice-langpack-et" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="119024a681a7c13b4eac59bc801a12d7c7210335d26c63b27e0b8f86312fb2d4" name="libreoffice-langpack-et" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a2d52aa85de36e5e17f800de7bdc5bc3a8c300fe946ac3cdd6d13b7e9de3d160" name="libreoffice-langpack-eu" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c70b26c4aa5de0fbc07ae77862fab008bd1e57904cff48df918f2c3b329b7238" name="libreoffice-langpack-eu" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="cca40f26f8d455499e2a6b94c1ee038e0c74c96b72d0650c765882be5af02ce2" name="libreoffice-langpack-fa" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f5d39ea6b7c5de50c978eea4f75ca7b9112dc1dc906addad9adaa1e672c8c834" name="libreoffice-langpack-fa" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f53af578c8dd8b8ff2d85ce7c7aedbf5fea5fc7206687b35cd581297235b33f8" name="libreoffice-langpack-fi" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="eec66a80d60abb4176788c4f9868ccda7430b831707084054dc98bf57bb75792" name="libreoffice-langpack-fi" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="137790437a6957d9a4170d129a4d02db542c7c7561dd508b048d39e7f793c56b" name="libreoffice-langpack-fr" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7fd3bb07f313d6e2de43d99945c705c6867ea8d23402f30656d081958694d21e" name="libreoffice-langpack-fr" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="666ec21042e351271df7b944af58c60e0dbd53901923d7238c0556a29f2f92a0" name="libreoffice-langpack-ga" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b6002cfb51187d136289571216eb6ed231a6fa3845faa645f4677f201ef4416f" name="libreoffice-langpack-ga" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ff18b0588903cbe36c17788e273f7a072d0ca86de4b543e05de9d6d532aae630" name="libreoffice-langpack-gl" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="73b4831898e82c46f21a8714b8ca8de454ddf8486be71172b9d4c3c6efba9421" name="libreoffice-langpack-gl" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="69b445d73e22800f60ad29dfd812efd8d39416b585d99d69067b2e636e145b18" name="libreoffice-langpack-gu" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="1acaf3974dcc6326ae9c861bcdcdf252019bbbd27d65f518941e39c86bafbc06" name="libreoffice-langpack-gu" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="71f8cd09b66f98160e1c0aca18dbe00272b7f329da7827ba3c5d3ae2029652cc" name="libreoffice-langpack-he" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="95f03b53656252c0887fa55f965d7aa3d388d6aa3d65ca4a2dd6786b8b4959d0" name="libreoffice-langpack-he" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="62059255ca0c2b4352cb7e4bc9421d097f3beb7449f333467a7916af7664ab1e" name="libreoffice-langpack-hi" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="502469fe6a57a215955f6eb39ed1807d5e045f743ad59b8ea876698adaf8d08c" name="libreoffice-langpack-hi" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a1ca0dc64af310a819dd00d70267cf7c6b2eb04f7224b2ac46337c4ba1c776ac" name="libreoffice-langpack-hr" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="580e658277d723f21daab24b6330d8cacbe45088b0428bf9f37fe30ac1408132" name="libreoffice-langpack-hr" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c3ef2f7772d367a54ad219f33f1fa7a6dcc1f8b4eb9771fa4b47292a46c60b01" name="libreoffice-langpack-hu" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="772d222a427ec5920c5f7ad340b05cc2e87fceb9e4dcac50b36f36b637aa4ae1" name="libreoffice-langpack-hu" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="599a1a5602756720f8d7e50a5362fd6ea55e7087ebc6588524171833ca0d7840" name="libreoffice-langpack-id" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="116b3690bc8c5a96ab375ac655f907fcf7f2ae905dd8ebb571924ef547066880" name="libreoffice-langpack-id" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="be8a9d4949b08c1de3d035001243cf2f7f6c34abedf32d5eaf398c054e545577" name="libreoffice-langpack-it" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="16c77c2786659e4b018c2f044a1bb20782e6fe08125115bd64488fa08383a80b" name="libreoffice-langpack-it" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2c4f52f899bee016d9883aee95fc781c6eea6f0126d7db3cb14d3fce90a27078" name="libreoffice-langpack-ja" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8aafd68c61cd9a2889829bd8d6aa63074f3f98caac8ec1ae9f5080ca6ce807e2" name="libreoffice-langpack-ja" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="1126588b39eb2ca7c4e7e391a418d5fd390e8ef55a943dd1fabb4c19813551ea" name="libreoffice-langpack-kk" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="92b566f4ba6476da1b09914f228a015209ae0c6fdb97e7c4cfb897d282bc3073" name="libreoffice-langpack-kk" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="5abf49995f7242e87cf7f01b66b5c59d4d15470b96555808adbd2faa66afee7a" name="libreoffice-langpack-kn" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="59fc1f27ab00bd4d78d21a53101d5f66716f390b313d38ccbee466b680618abf" name="libreoffice-langpack-kn" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2add7a6e7d08f523a32e132b39a93f93d71dcf28c402dcfef7bc7ee56a70d4d1" name="libreoffice-langpack-ko" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4b8d8ebb64f8799ebab7f75c3c8089db2acb3ae2a36d93aaad25445305db0e73" name="libreoffice-langpack-ko" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8b40fa1987173c2c13e4695ee028e7b8bb7e813c7253dd12f1f1d4d396899bfd" name="libreoffice-langpack-lt" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d65a2a7848bd501b60867946f409e5f29bfd437222a009d1bd78b139c6d9c4fa" name="libreoffice-langpack-lt" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2d9b682eb07166e0e8edddaecc20f5f3e5c3c0c28d17df70dff6e0b9bc3bc259" name="libreoffice-langpack-lv" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="0ef56264e79d28a5e83dc5b520e4f05357519faeb96cd4072be29b01cfcc58e9" name="libreoffice-langpack-lv" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="25fde67e78bce16ebe003e4535cf34976451ef591fe8490906cac8dab147d690" name="libreoffice-langpack-mai" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d83abfb73a3e02ed60f357d262185f6d930f8e978597c6bcb29773e9555fbd0d" name="libreoffice-langpack-mai" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="0866f21bda3951b484d0570aee6770e3b8955b1025989b0a2d69cc1d424a30ce" name="libreoffice-langpack-ml" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a673eb3903737532d7802a0b6953ab4a53ade3a6a0ffd58fb8f1de1b0199a898" name="libreoffice-langpack-ml" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="652c1ae2d56fb933fbeda552a6e5c7e7684b955d27167a38d4df7de0400071df" name="libreoffice-langpack-mr" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="03468db3afed3ed4892a76213c044ebf4d2480bf7efd9d79fb3bb557f52ef5bb" name="libreoffice-langpack-mr" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="626418704a7729513527b16e23e6c96dfd93a8498e220d4d154189f747448eb8" name="libreoffice-langpack-nb" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7ba54c9bfcc9f6949506a4afd60beb781f20f4822e80d7f08eb526088ef94d4e" name="libreoffice-langpack-nb" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="fb0d0271d543eb67afb1ba1a2a0a2408bf589986f793af05930228c5d38f7048" name="libreoffice-langpack-nl" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="fe46f35efe84aa73673d231154ac602798094ecfb30a25c68cccd55692485eca" name="libreoffice-langpack-nl" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7dce7caaae9e5d7fcd27b3e0f9aeca738c9fb05af1301fbb2b61bbec1fe321a0" name="libreoffice-langpack-nn" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="9dcfe089e1f84863f89921db03fc345536a8683bc179b303be9ac3ff3b18d8c7" name="libreoffice-langpack-nn" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="aa920312766ecfa8113205762eb534a2221db7178d7d3d1af506045c6ffe7b0c" name="libreoffice-langpack-nr" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="71fc342e7837ee2ef160332bf181268595f0711aed95363c00ae00aab4b6a664" name="libreoffice-langpack-nr" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a1b463de903fcb3796bdda84cf8ae1be5d893ea063df288df3eb4f4c6d78e553" name="libreoffice-langpack-nso" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d32b444430808e4e5b76b12f3107de1088913cfca7793cb8ca9d1f3bc860fb03" name="libreoffice-langpack-nso" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ec98938b7ca6845be9a142906b992ceccbb2f1530f0d670fb6174a2deed8d474" name="libreoffice-langpack-or" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="34a37cc44ec1dae52c5d6c00460a770548d1ad8277aec7f21fb9c24054d8be93" name="libreoffice-langpack-or" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c907612b39302ecccd7c91579765fefaeb8280d43c5dc44bb0352e4738729edd" name="libreoffice-langpack-pa" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2bd769461f8809a03badbf500208a622a7f12e092ae568c636baf01a8129f798" name="libreoffice-langpack-pa" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="220a6b64d328a6add9384c1638104fe9d429a2eff141a16a947a9fca6c8b0bcd" name="libreoffice-langpack-pl" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="79aa835488acece28e7ec5363c35f5cb503aaf90801b33c5b1b6ed18734d9e5f" name="libreoffice-langpack-pl" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b213a9e079f54675d5e2893ae3c86c29f115b048bc7fffed2ee2e84eefebfca5" name="libreoffice-langpack-pt-BR" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="b058c6cc6a76652ac336dc068627f2053784fbf05611da621d6a3d04c1130a50" name="libreoffice-langpack-pt-BR" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="82492e49f701cc9678e16142d80798914dd0219dbb9a746133aaf397898fd23a" name="libreoffice-langpack-pt-PT" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="539142b6f15b6e8ab902322c3d0801d40a09f9a76d39b87a5f479b981c08d51b" name="libreoffice-langpack-pt-PT" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="813ebb7613b5bc770e15c952cb3915397aa08e2a35e884f32a3099b91a4af40e" name="libreoffice-langpack-ro" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="67f68fc4a223759d47f318743018af6bf24764185d9da17ff8e84e25846aa008" name="libreoffice-langpack-ro" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="33b0cbc82e8c05379231c46dd2b1ba058cd1c4ff08d742a7a330fc30dd0b4b56" name="libreoffice-langpack-ru" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="9f9cb0c022ed2927791f41a59c8c39191b1cbf6cf5e1e8868ddab2f39c99d8e3" name="libreoffice-langpack-ru" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="97d84d8aed203a17ac4b13da15e2a030c8ed1eac9733652d39db708ca21b9fc7" name="libreoffice-langpack-si" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="33cef9d9dfb3302e49744910d9a7e3d03a66127d9ae57f6022ff32c9eba9f3ec" name="libreoffice-langpack-si" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="eff8262eb822c97d7633b945e7512f8dec62565690ec04587ed362ea4d3908d3" name="libreoffice-langpack-sk" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="9f5c09b6cab656d7d919fd11715c67049712fcbcfc25a4a0a22dace79552c5b1" name="libreoffice-langpack-sk" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="e60ba906aaf4b99198300898aa7505d48027e6b06bc24447d2e9a6ea9b83eec3" name="libreoffice-langpack-sl" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="abd6bdf2a86238d364b8110b34d16abfa8f2531e9415465648d4797096bc7999" name="libreoffice-langpack-sl" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="568d41b70db8370386d608d85e1299e1f62aa310b28e6aa20c6241759cfb93d8" name="libreoffice-langpack-sr" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="9f95bab04e466dceb008a114d605a01c0eb56ff74f1dbd8fa1b88cfa90199e01" name="libreoffice-langpack-sr" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="944c845039b05392ed48f6dccc3fb91fa70dd5f2c40cc3e8b36d3d6d36b802e4" name="libreoffice-langpack-ss" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d41f9def678f3060faec06ae7d2d8a49636ef50b343c25385e5dd78a634885c2" name="libreoffice-langpack-ss" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="0d123311c2ec46007b5968f18f2b083b6a02d431f2194b351037a62bb0211910" name="libreoffice-langpack-st" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d02e9d47452c08b43695670d7531895e9421f4f672f6d37e2e7ff50d7c514c23" name="libreoffice-langpack-st" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="58669e0fb3bb48a1a3be5ef99a9de775296da80bd10d17e0c41e964e52aae3e2" name="libreoffice-langpack-sv" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4558cd2fddf8f61dd8c8edc0c8c5a1100d671618f33ea20c8e552aa8d17e0e46" name="libreoffice-langpack-sv" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="157f9801e4b5dc6844c5d856395076d0c0ae44128e164e791d11cabed0164d1f" name="libreoffice-langpack-ta" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a1c713a0f2bb6b5a4e1a27ac3104ee6ee410c9f4cde9bf531032b099b913cffc" name="libreoffice-langpack-ta" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="65f1116831c2868ec135d7b4b2d02b081748450a2b2c20e318147f96206df858" name="libreoffice-langpack-te" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4fc1f3c9e2ef9c857ad1ebd0123bbc6c11918e25da2f95ecd1e13bc67577afed" name="libreoffice-langpack-te" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="6dcef744e4def7f6eaaa4a4f7973e8b1a86c0ee3bee250e37c3250eede1025f6" name="libreoffice-langpack-th" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a0a02084fc86b3d2b71466f969fc4fe80748ecaa58174b4439721c8a8e5ceed9" name="libreoffice-langpack-th" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="88c634b41193fd6c4fcf0eba0f53b857b8252ad3bc901854b520e43f3aec36a5" name="libreoffice-langpack-tn" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="776a927a909caaf01a655a7a60314cb50bf03f4d0080590d0455650cb1cbec00" name="libreoffice-langpack-tn" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="83832c1d0b68f61bd500b815512d8f92a644345722796399e5907f7a9e0534f3" name="libreoffice-langpack-tr" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4f0a987c417d99964af4fc86d5c0f938b6a90dde849f1c16066c1f84578413d5" name="libreoffice-langpack-tr" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8442641c66a0af1708dba819f10881070dbe017af238497a8f3347769667ffb1" name="libreoffice-langpack-ts" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="46829a15504e37b39b224e17312043f297b57ea64db4e70882cb61d02ca188d5" name="libreoffice-langpack-ts" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c070279e1f4bff1c1732d1c43420ad51062de9bd0502f0a64c5266f904859c20" name="libreoffice-langpack-uk" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2b35b9052e91f77744643f07add54e166874649764e7b91eef62a79f978afa15" name="libreoffice-langpack-uk" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="e6710ba2eac51013a7721ff3413beeec1f5e7a3bedfd79b9922eeaa27ea286c3" name="libreoffice-langpack-ve" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ead816064b4e6c67ee6a81300d32b6025cf964674cbf4eba71537b95bc718497" name="libreoffice-langpack-ve" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="fadc5ca6218e47e91f1ac6f0b94c2d2b38f771f500abc91d618358b00c39f0e6" name="libreoffice-langpack-xh" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d160e11228b7102a66c0d7530188ad56166dde3a13bfee9f968bb67b305263a7" name="libreoffice-langpack-xh" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f28fdf6241b4108a3e9345f04312b7352296b3930b26064434ca6ed001375234" name="libreoffice-langpack-zh-Hans" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="83562d2f8e072887cab445325b4c0a59cdc0fa488bb18e3dbcc6e480beba9105" name="libreoffice-langpack-zh-Hans" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="dd661fef69aa7cb69845cfc2d4b6a39a6d2a06a6bf2c10ec27eed22095141ffb" name="libreoffice-langpack-zh-Hant" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="0cdc66fdf76b4512abb73a5b4035abff4c4109402595d46345d8bc42011af237" name="libreoffice-langpack-zh-Hant" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7ff76f34b61f92f7e80d6b194041c0224432afa81b1ac115421a6a07e7215626" name="libreoffice-langpack-zu" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f5f7e1da0f65d9937c2034591b23ff75af72aa1169dae3c1dbf5ccb53bc5dd7f" name="libreoffice-langpack-zu" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="1443ad661b991fd92833ca57b37b84ce4cccb74b8564e86da43a210e3d80299a" name="libreoffice-librelogo" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="ba41d5daf30988de7e0c98394dec47312855956841481f862a553f023912c50b" name="libreoffice-librelogo" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2e8aeea90783c04ea31faf721e6c7ab170e7065c75e8255448330db1e5944819" name="libreoffice-math" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="54cae439d0b3a59e50e8d60eda85c689ce987f50f01d8266a6f0c3ad22de075c" name="libreoffice-math" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="3d3e941574367e4eeba358ba6645a3a16b3fcdfd7963c0c05bf9dbba9500011e" name="libreoffice-nlpsolver" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="9577afcf89381555f2b4d4f1f5a3ede85fd51fa7ddfd8a826dae5ac266d91caf" name="libreoffice-nlpsolver" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="d0d9f6bbbd6742df1bb5693e067a0acbc3d25422126fe7120539df2d5bf15050" name="libreoffice-officebean" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="fa75089bc4b29c9648a99fa3b925d43bd64dba365955a352c1abd5dbfbe059d1" name="libreoffice-officebean" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c72e113073026a8f14bfb81d94d695a307e86bc5d6c2b821f2f25ae4f0feb3a8" name="libreoffice-officebean-common" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="deda50a57c2f347b114cd262c1a5f1fd0d5834de17dacb3d939d1a8bcd9e533a" name="libreoffice-officebean-common" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="56d339428f0fb473e3313eae1805f53128931e1c2ce008d2a9131e2dd0987b89" name="libreoffice-ogltrans" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="e0ccf90054de25fe35e03ff8945454b5fe042117d63bc95168c9f1f64f98c861" name="libreoffice-ogltrans" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7c0fea3e62c4ea93fcb29d511784e580de884f8c3134ffd93fa978e660f30b9f" name="libreoffice-opensymbol-fonts" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c65384e37c1ae1da14c3dfc4c2922476633a516bd42758cce7ae347a3f7cc532" name="libreoffice-opensymbol-fonts" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2d6701de51aa3f897a6f8bb4900fe3077babd51b0594465be69954a1632651c3" name="libreoffice-pdfimport" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="aed0eac54b95684cd900e67eaf6f57faf73203e0cfa11273f2d4cf7c45da2f77" name="libreoffice-pdfimport" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="a2fb9b9e206a3d0ab72c099e1e354d57ea2b853b3393fec967e09ff90f472ce5" name="libreoffice-postgresql" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="1665ea227152ef0457ccff50c82d90b59a1dd207acad1fc36268990f0dbdea00" name="libreoffice-postgresql" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="7a86e966e3d0d97c83d94cb5b96d23797571191ca401be6ea94fa1e6e20869af" name="libreoffice-pyuno" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="f47afc72351997d4d3fbb1869d3421faac07eb9e8fef084ac732f2e4861c50d2" name="libreoffice-pyuno" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="8e4243b7280c5a8ea070c701ec944327f166e30482389d54f37267e5751cadcf" name="libreoffice-rhino" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="67b2d3f6e120d58908e6e7ca763b0d480cc3c704871e837a474872e032e489fc" name="libreoffice-rhino" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="e8a0fbc39efd8d3eefd5ead9f57d10d2c655a50fc362b1239a1e6b644fac1051" name="libreoffice-sdk" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="98735fa4d49e79563e281bd4a649d74447f2a321f334a0bad2ef832528418ff2" name="libreoffice-sdk" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="c3af5c6145ad779b4b2c591aa04bf108fe0fd1b7255b2cd486c44b7cdda6f2c6" name="libreoffice-sdk-doc" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="66ef1b79888e5bd64f1e2bae86d44c2eccdeb5ce71266b4f72e43644440188e7" name="libreoffice-sdk-doc" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="dc4b6e7abbd07b8378d1fc27bdcc105d559cdb0656c50e7a6081e7c9ca428cfd" name="libreoffice-ure" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="6dd7001b3cd670a9f033a771bc7742909eda9af2962e432809f4d42ef315f74a" name="libreoffice-ure" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="2aa5232d8f3d2a6d8b07c1ea1a32ec952fb1551f8112b61efcb0cd3d3aff619b" name="libreoffice-ure-common" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="cf526a44886000f0b1d83214d818b248b81049eb295b642dc35e744189450b4d" name="libreoffice-ure-common" arch="noarch">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="175006169dcc018c0523c93306e40a653597c5807a7b27b93ad50254a0b23efa" name="libreoffice-wiki-publisher" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="4ae84f25f2dd9fd0227c12fd69d00d0512fc8b81783875cfbcc36f4fc2dafe19" name="libreoffice-wiki-publisher" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="0dff27674444da47af7e2f461ccdd0bbaef65feedcea4c32f935515f623465d5" name="libreoffice-writer" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="6ac096fef8f38e88e357800f9b90c34e711efa64f7733674118f0e87945a0f20" name="libreoffice-writer" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="042dc0fa910949b4fce318ddba378f026cf84a6ea5644b2e206809b64a35ea43" name="libreoffice-x11" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="6d32418da5835b048e704c34050906d0d44d4a2bcac5f04a60d0710fefe05d41" name="libreoffice-x11" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="447904b5b9e4f5bf82af5d21d6e3bda67b5c44df8cae45e9f83119504b2a7dbe" name="libreoffice-xsltfilter" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="18a42b1052f5b22ba5c18944aab27b72ef2bc3b2650e9d1f041d54b1768d4636" name="libreoffice-xsltfilter" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="884edfc309a3d6e50df8957f5aa2511c0f9cb9fc56e892355a11a19a0666c4e6" name="libreofficekit" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="3eb326f8343524de9e4866052ef66b51870edaeb8cb055c576711813244f480f" name="libreofficekit" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="802efeb8423e96afe9173ebf10d9d40ebd0efde48eb5e1f52af5fce3c5466156" name="libreofficekit-devel" arch="i686">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="62e1455fb485dd73ef4477bf3e2c4afaa8b093912de2c1bf68d973755dc52626" name="libreofficekit-devel" arch="x86_64">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="0439516d6dbf0f0ff560c17e4baa8d1696312dfc220a569fa94ba8648eeb8a28" name="librepo" arch="i686">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="5c8609e974d82e19fd43236009b0f7529e0e0270f2a710a95e8f198ec50bcc08" name="librepo" arch="src">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="c3783c1c9c9073d87fa961f19dd90e6cb59ae290e7d18de3b75c81e29da7b38c" name="librepo" arch="src">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="1ec05af39e805be15d08d2dfa3f7ad2d31c32588b2a7ce277201c6e0f4920a60" name="librepo" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="d07bb6f7d33813208fc1c9d0324a721fac28e7b2d35596f71c8f8448b4aef275" name="librepo-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="c36b0e25ef0fdceab9985f854ef6c9d50032298e6d06228c0a7bfdab0837a3ab" name="librepo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="7af7a53ad3658ee356b1e03bf441661bcd10ce1072855a944c04ac2e3429645c" name="librepo-devel" arch="i686">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="2f2fe4a25960cf3d1ab3132c8c1cb740201e1ae90bc3e7989bdd44dc7af5fbd0" name="librepo-devel" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="a766d934d0ceba7696f27c8c03128d9a9b9667133c269ac124caf7f9d0b8d97e" name="libsmartcols" arch="i686">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="c9ebe6f7fc2910dedcda158178389a266d4c94803458e1dfd7775de4c640f756" name="libsmartcols" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="08b3acbb47c3a34de9e9482cfa4c46a3c205bf9f5796e036f301e7594996a787" name="libsmartcols-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="15ad71a7f6fcddd04f86ef8293b865aa64bf8aaf8969a446d5167ee81fe0e4a1" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="2de69a38a0b398dfb6e30ad05ccc95023bc2467c310bbc3f8c5033f3f0ca9212" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="d2d6e91e909cdef8709e54cb68ab953bd9a2048a7752d9dea32a304bb388edc8" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="bf79b8d6ef635d1afc7682d862df98320b2521e8d5eaf311cdf3331b86ec12bc" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="17954a0eab1ef26eb89801ea254a0d08be7553fd0ac716cf0239e6e9a3064a7d" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="e80d67e6ce9d34cde1c4b54ab051eac68d8774a55045960a1db744d45a8de5c9" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="9294b09abfb5257f08fa4be9a7c777b56500c26776fde9589c752cd82e781d1c" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="8cd99114a997a6e04c15d779db6d692a4099bf537582dd25f6639ccfcce9f8af" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="2d710ff162ec372dccd7b4e7c25c45e14981276514936fa7dc41cf98df9475fa" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="d04e8fa1db2e40e7802df38962682258bfa433c295c284fe63271f8adc839721" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="b7031f0a3700a28223e9e382feb26674d0d2e62e731e014e3e7372bebbfbc016" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="6c0c5efbc8f350b0c45ff24e445a460b26ce185e33153f3e6b26eecef9440061" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="6c17515ef294a284a92da1ee84ad0b4eebaf1a93b15402bf051e8e78c89fb23b" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="134fa9b0696e8af468fc0d08390685fa89b239251c0f3ce51c4793a222e23f08" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="d48bcfc764fdcc10c0ba487369ee8e68336207771962ddeac303b7fd05d7bfa3" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="15f38e149bb6cb42f1dba5b5bf68246c0b408f94a4ea3677c12bf2996e8703ad" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="386c132c36a794c0a8a43d900868a0c7c64d4e7a1bc2c7ebd48ff86c13b5d33c" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="dbb5c41c5863502630dd54c3550397cf0f15b1c8a6db9f1514bd9141c4fcf9d4" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="6e28cc5ee618add8332137ce25a5a897e74df1727ad2dda5904d1988bcba97b7" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="2e7e38b2cf544a4670c989fe9838dde97fab8c245f118bb1b5c397e27fdb1888" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="55416fe93f85a627f55580718a9c596f5112d45960cf07bfda96625e9dec9607" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="54583bcb56aa04e81141253fc0f28d54a139d9439e0f9cca259ca19b7f39d52e" name="libsmbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="ba94d84eea592c27ca0baa22d9bf9b7346896e89a4f8b0ba3fcc3fc1409d38a4" name="libsmbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="a3c52b388323702c0d468a44e602122d0ac092804347f02a0f8ad87db7936c8f" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="d6e5c1f6d43cbe41861bcca1a64410c92f2ed0dbb4d6838c8ed353192ab02b2b" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="96248899b6910d556f098f775088ddc7371d223b0aba9dc853516ca344a5f159" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="a450a1c0b4667633e8f2d59d2f0539a3701c8ade3317607ef2d8508bee86318b" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="5d419db4771d1dab8990ca17811cf982fe444000da192d8d63bf73681110c2e6" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="25a9ff5a495a9d5e082536ac0064ff366249e2a5e2b7723e54908eaf883c0155" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="911985ba3a8cd46aa5eb7699ea07e057c96ea91b27c573e958c8543c487e3de4" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="5764549d8dd24a7265d27e38dbbbe50fbf4afee24dba3fc3acc0bf42b2bc27b9" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="3bbc9e04bf607f05d3c0994c42035bd03400d12ccbc0d60d291dff9b6b1368e2" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="6a02838db9aedf6837357e5a1ac5e5bd2d8e8b5c042824cbff51fb7c4b0c543b" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="8c9b4d3584299ec0df58e2c8f2ee55ae48d0b764c22910a9b65bc4faa0be511a" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="154fcf75e81d727b2513d9bd3893638280061915ab26552e4c55ff41e26c1d47" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="130d485d08a99677a4fa3b53176b785e6d61da0a0dde73ac9052d7156dd8d4c4" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="4cfdf7cd438ff793a1afcc33e4d156f0201437728537d0351a3c18827f41030e" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="c4b8a25d3969e21a9a8e4177ea9a57b3b4095fdfecc92271fb68e6808b8a345e" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="1cdfd978bb15922ddaf0ec64541f7967edde092ff6f703b353dfcc6699b21418" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="427b0cc2fd72c8216ffb7400a43b8b527dd60db606ddad55d646acd9f3857581" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="6cf1dca63617af62688898c7c4498f3bf3472d424cc29d8f6c45195886c6acd8" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="efcb686bd46f0233a90a47e9dfe7e82ea0299a270468ca180a60cdc6bc1ced60" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="338ce60a3df4e02faa03422de85391952bb94d060a579ff5f48e87a8dc9272d4" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="c48e69073f6c50423fd9664f9d6a20628f03ee40e675b6dc5e608e243ef97fb8" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="f70d2db6d57f91425f7a94f4cfc936032598dc97bb9a68847bde9ddac3c0d716" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="09b6c69bdcb228b877682c4345db91da6ea91f91e0f14feaf88787c286375c8c" name="libsndfile" arch="i686">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="f973ad2d3dd13f81d561a37d8b8af5bbaa41bacee977d5b8797357512fbc7a80" name="libsndfile" arch="src">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="1fe8287b357c796e570ddb65255a5b86deee1edc20cfd7d6c6eab1925e8bbd2e" name="libsndfile" arch="src">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="396d333177a5e579d32441da72bc6c2463e974073a4cabc2c3aae375850dcf14" name="libsndfile" arch="x86_64">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="a750508b6ba69a6a8c54bda8062573502d2621f279f9b73a66ac6f261b74d8be" name="libsndfile-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="e925d06c03fb4b98d12ac6b189e7e7fbe547f4c13a48487987add5a7c3f75f93" name="libsndfile-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="17b729f9a542a0d2f14e96acacbb4fb40da895b6a482b6d54c89801c0e5a5e3e" name="libsndfile-devel" arch="i686">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="c6ef0dad2f946207e26a636a2a93e74257177d7ad811dbec830b28c48d616f2c" name="libsndfile-devel" arch="x86_64">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="79167bfcab1edc7954b0cb5e3b210e4dda372539ca1cb2560a66ad4ffe1447d3" name="libsndfile-utils" arch="i686">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="8d48e66663e0a5bc1b0e7e78ef72e27ae93c818a255490fc5a55a66fba97bb0e" name="libsndfile-utils" arch="x86_64">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="96784526dc0add0385c11b5eba0e16392e3a080c9c35e25fd7ca9fb0e97eb8f2" name="libssh2" arch="i686">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="fdb49c8228c120c36621d59ccefe398a4b9d3988a7f939617c78a5fa4a561adb" name="libssh2" arch="src">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="effed68f46ad7577e8c772db5791e4864d534cbcd294ba169ee8f346d7a7ef42" name="libssh2" arch="src">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="97a23c6b74984f6e746675354e3a73858785447bc6b7549334017d17636f69ac" name="libssh2" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="7cffa0ff84670f6d0abe1b9eb2ddfa915e2228be8ac8e222d96dea414465bfcc" name="libssh2-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="e32b5727e5dcc213934992d8978fdddd208587e028352d55a33c66941c08ba75" name="libssh2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="ce0e6c7ef8a9d9a9ff15e8e40fb11797675abc8aba4b5355e6bcb4b4e0b66108" name="libssh2-devel" arch="i686">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="cbbc03f95571fc1afef07c323c655b28970d6ec37c04306126c2b5acc23bae41" name="libssh2-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="08d3197f1b77d53750b188ee4c1701ff75c1781ed202c4aa79f7ae338e8ebec6" name="libssh2-docs" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="1999228a1240e6a29baaf9af81ea01873155082dcfa83616d738eff0290a2e02" name="libssh2-docs" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="6083dd2be87eb9e4851144592557eb66aa342dc2440a41d6269009708f1c484e" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="427f2e99d39688f108e675a386413702eaf90f366ac7f96425615e6b9065545a" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="b2bfaf236aca16c5a970198f55d68f25ad8882c7708368e5af55cefd52c8c7dd" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="fb465a4fe9a5c3f5a6d03b7ab4cb7d6e161378b5c29c838e8c2d97f01a17823f" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="f1c76eb43d202d76d4ea6437424dcdedfed080b7bbf9df7a8669c50fc5007a2c" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="1a046ac1b59ef6d81f6d6c0d6036f6cabb425126f1857e61ef48e46f16862490" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="a58c93bc4a92169bc4f3b7416c76dc82b899cb0f56a5177e570923c29f5d5261" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="dc001a12c71276de137ddd70363c011cbbf70507a4fbfc2c143071766afa55f5" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="a469b4fc412893eb7c0b0bd67d4683c54c98dce7288be8959ae16895f3f290a6" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="bbbcd80cc688a67484d40e79e80b60a05d892e8c482ab6f1fcd84841b85b8da1" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="3c5c239f660bb58423ba373de950f4137c7678ea4f43efdf771cbb41bc4a8e1b" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="2f79604e4fdd24bed37f62907da5126f0d60cc9239a1a2e96236cc939bd8a396" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="8e1048268793b11c96e09fc6513dffef1793710c64c5e6b304395b87d1c884d5" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="86aca582303a286b95e7bd75df5f82e368ee89f231033e95dd300e8e80552587" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="221b015067f50c7c34151ab5c55f1fd249da65802bc281d7d530458a5e614953" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="f5f4b68cc203b0058858d208c7a0388cd63957133cbccce46e26a129f1d8c810" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="9a8269a6978fdbde87ca7574b421515ce91410b59eb5e55fac9167409b99bdc2" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="bed77bb12c862d60f0d28da9a68e67e547b01cb2b805f03469e2e4ed192a7d6e" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="0d0a56c6cc7a332de23cb145cba11aa60560abe2bda8c71dd46f41a3b12c76ba" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="b4f66c6d1ab506f76498f84c15dd1c836aa6fe43d22fd9e3b39ea802c2f7419f" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="80e5ba371d853089d1e941afd0859fb7851a967346b5045914d3d719f2746ee3" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="1a45ee5c0b7e22c4acf184f7b8371d4389224e99aa98087a688d4143fc8d98ce" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="fa6f4a43284f9bf2b1e15c50a52ff05114c4fe2e1e6a0d438bbade0da974c1d6" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="e878d8bd9f16c5927b4d47ee7ba0cf4cc20999d26ae566bc9c25b066a325f775" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="7339b69704d2c2e19ff10f192863d0963c3ada506eaf38dd2f26773d1cd5a21e" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="d983c8dc5304f5e73186e0150ec78b5b0b1c30c71df2d0da7b4e959833dc61fa" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="b843b2ed303b917267941525724f164056187029910fc856fe2bfa3f79195846" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="47b2c4779fabaf2b4979e16631ee99043ac228780818a981955efb21b7c556f3" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="4effcd849361401a4f0c541845f82883d068512aa83529bb7216c1274bf57760" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="7b6d0cfd685c7478abac9001193c76099bd2fdcf946093eb53728e095e25dbcd" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="0bc2f1d6a1982fe343d869a7ffb4ada3d224a3283fa38048fa1feda284addd87" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="e879b88716c081a72315e757f36d99e17b50679ad4eb6637952645cfe9954c94" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="1c48b6bbfc998277af266d1ba8dce5e1e2e36e62bf8f1dbaa5d07466f7ed618f" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="0a3177604b53178c279565354511040c6f3b9742b57a9c3263c8167a71e7322f" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="fb901e9dd1dc05e980c6d001bc7846359b261bf53f8238498a62eb4825c2a432" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="9ae54438eeef1d3a0285baf73bab1ff369c6117a12cb49c6af29b27de7080706" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="68ececc35c50fa078035f06cd589106b47b400f2765b58c0d60f35adee98fd24" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="c6bad25c72524abf91107a1fbca508889a70b5f1b562188e0076d66553a77497" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="bf22138cc16f7da4b74b94ec9710eda0a2618b35dc40ba8af56facb0b1db4649" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="4b3b8f73e7edfb9c4ad41a7e18cf906099ed0b883117ce21f49a70018b4a54a2" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="6c08d411c342e8e4c2e4e9be413c5d65956fcfe0d1352d30b6c5b8f534f81e55" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="163357a132bd3fea13b1be527db6bf70a6d2b683a9d1d578a0e79a707118d475" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="207d9d01a61ccc32b8f36b513032a7c8f91f8b0e067bd653e1928fdf4ed34c70" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="62b28fb8ff10819b6d9eb612db356b665e26f804efcc8a5a913b949d20240a4e" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="ea66a64a0fcf2820da998ed29042241cb323506cd4734852467650c8e72be386" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="d2e0d06241fe4dc94e0724b205a65c42e04d36b6b911cbfb4f1bbabc8a6dcc89" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="907b1e1f40de62be8905a2841214ff0b0046daf31fda85979084cb5c865fdc1c" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="ed9a3d4163bcf5e9dcfc5ebd944d5ce885cf36aa03ca00ead105aa1236fe8a9a" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="0d04d85a99ef2de4ef3ff6402da7a318f61ef63517220981f93b092c4f16efca" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="b6394fbca33a9ba4e552d013d8e69688ee50edc4e3bebaf0019a636ced6289b8" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="e2e7d1a38c8774b7c2407f4a4513757189bf178482d426dff83a5bd3b538fd6b" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="ad88a8c06c8d6128dec70344de47cbdc56a9391a6945cccc42b4acd710540647" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="e1f0152e2364b636d1d06b5549e8ea96e2c84ee638c532861c1a91504d3f2d83" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="3734779631e8bb6b99963a1a663aa353297986612c0d30d21fd4a8400d1a4ad1" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="221ddfa2c8d685f09ff716c0cbdf32161b45740feb90a6f0c30ba88226161ae5" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="caed7df922996ebfefd1549bd5f66d654a4df038859a3dda71a8708cd95f4e69" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="0a635354114881ed70a87d3956883943adcc7497ae8395f08ac5124d89ce71f2" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="74f85e1f9afd2b96534ad56866bc39ef6dae701cffa820776aaf81b06c0feec3" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="e11cd7b0b7e44e915d31f372c6cc8bb6931fb39e5293d1de070287f817caf2e6" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="e8efafb4617e89ad94380c6db046a22f1d0cdfa64320824c8468629ce75cb86e" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="d98835f7d0c3860acb1eeca81573f1b5835cdac9ada77d994723e1e59be78f20" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="1f9eb16bc27b634b560228d7f1d27f1099db55a354fe18c3144738d1506e00ec" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="696bb6befe23af3aca8ac86928cd5c568560458c83ad6b735ba1dd547006637f" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="340deb76ed432d798771572f4acbb317004bdb2ec3fa0c26c9d22c313281f55c" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="13e9ee3016b0de388a999adb2ca96f7ad0da96ca116431cac10e37fc9c329f82" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="09244e313c32aa83fbe7496d75b974aa765022f1e1ca078c962a06779b6b1bd8" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="dbf19117d69b405a0ea3d1f86e954ae32f9472be45ed0c894ff697da0b2ccb9e" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="b65256d1624cfea4e9719ebc7fa33d0ba5d02b02fd83cb3559bf88672a7569cf" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="fc151b7df91c682fcc017b0203c48faf5971a13c5806fcd7f2b3fb7abc2cde4e" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="716625274a31dc8625f31f52693d80654268d90fdd64a3f396e3d50ebe542df6" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="cd92fcd5aff1cf8703dd64f6a078645fdb4e7f9f45bc0e32e39dbd4ef6ff42fa" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="8d2b72cbc2685b22cc9ab7503e791eb8943f51fee88ee8ea20536a1b882aaae9" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="bb0ee232115129d4900ea8e8a7d16ec8bf970f01df9c0f45a4fc1535e341b6bd" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="74f3e518a399b2fb98bf532f08400939a9d16bd7cf73cd90f872c09a0997f5ab" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="951b0f1562fcb68bd8b5c5d8729a78dcec26802565558ece1a745fdbabee2315" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="5e309d557a33f90485ec4a978ee64ab72fa6925b9e4ff0aec8d6d5c9c84053e3" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="2a39caeb11fa68bc4d8028436de2fa1c7ce687bdc0bfc3827d8664049ee0c03c" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="8e16ba2f9853575abdb903c211970fce2bc17ebf992ee6dc158c48aff9bdd884" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="f06220b0b5e4a4736dcbd5b3048126ca213949766f988d4795eb0eb32d054798" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="333f815f1dfec5d2552a55505e266d6f668423bb7d1c20330ea62816d5b67b03" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="bee07a4b374e70815c6450f148bafaab7a9c7530d1b8860198ea740e09ddd99b" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="6d30e1a865ff4a8980c67b218f8e2ea2b0fc5048d620e2b52d519e1c1118566a" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="c5d6d63667e87cb0089398fe1a32ddf6e486457ff4659dfe255cdc200cd69a3c" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="52a656ce66d622a2cbed8b5ceb48207e7aa92596c6b11ef97d2968c19bc38f82" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="976c1e538a8385951bf7378018ef8ee315514bb556095f1d97673c36500ca843" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="a066e19f068fec538bf397578da89903b2b48cb83881196ea9c4880ba9e5e1f0" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="03d4ecee3997ee3c3a718ad852f34fc43cfa876defd2942a6515220ace1d7f92" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="80c30e6074cb02bdbbac12f54fcf3122dfa8551a207372cc97e071ee6b715c61" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="bcbd424a376d9d998db97f9e2fd9dc0fbc0dce3e9c46441c2fb3960a5e525faa" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="3f9fba44e0b3242034ed4323b39f00b67b47efc81f3325e7c5171997942d907c" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="f29359560aede76c56167364dd16d51196fa9a960efd4ce9984ce198498fd8e5" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="9f94dee0408bac605fea370a885d67f25c02d0a10eea3509faef64d4c8f11550" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="d96c712d3f016e18c118bc0a4359cd38e5ce9f3069d1af28f6e65550125678f8" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="c223ed4981d5be26f3d74b9d74e35377a7e2e3cd9f138c4f333c4fc409207bbe" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="2c7d8976b233839cc27c01265fcb2b5c3e5b2c53c784c2a65034fc45a9e26a9e" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="3bddb210366903705c2d937f80b98d0bc61455548249ff6182666dabab993f35" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="4e0724e8b0242ad2d1235d9763ad2b25ea6589979f1c5cbc6d98d3d149289b5a" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="d75c6c5bfe6c812a59844f52b55210232ef1f81ea9c8e960e6dfaa4c8c28f9e8" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="ba8f023bc523d638dc14cb523b93ca7286cb90d5f5ee82ae34c68c53b24c8728" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="cc95c90c32f9232c689ab6305695ef7a0215ffda03d53dce90974f6bee5ef667" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="bac783056dba1a028dfb406c8bb6bc36538c322c282b19f339b1e371dd2972f2" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="442e48323c4281fb1542171a151c0b89cf8dfa781dd277671ee98d0169e5149c" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="f10d69932742ac2e28b963e09f84f8bddadb88486beb875200399760e75dde68" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="c51010e17e9de1a927cd92bcece4d097cdc3819d77f3397ecd15868394e80120" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="29e8559cf59b1b853d57c6da08cfa1b67176959c5f5d8625b787a628c66afdd0" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="98d8856bea224d8df212eb5007880364a7c0eb9f91f9dda35711f62a7dda2f55" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="090a4a0c5a2b42fd5c41c7ac52c821dfa28ac0a62303d3f131d6934bef9bab24" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="5a2a482e20bfee894067463dafb7fbb0f9db60d9bcb63efed069b5cba8d0e77c" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="20de4fd888ca11a2b49d4a2a8873a53a8f6dcecd447c5187a3f24401b1a9dfad" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="ae1faba63f85b4f9a6c5c78ca36ad8e80bc4fbcdf53d7584320a3207c9582100" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="3ea9d0457f02d4acffa586625a649d20fa13f4297e235eb65c7e9e05216b3285" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="186cc41595e3bf14280848a17294a7ab707cfae121ba9938bc61f077ff7bba5b" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="e8f4d443a1dc711de6137182d9947cc7c192e85346604cac708800f7511c4c41" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="793e5b7a66d0fd25c181fe24824f79c9b1d9ba2203f6cdf43f2fa14a9a16dd3f" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="65fed645b445667412b299399fd7e7b5e8c16f22a4dbbf66c58d80ca6c08db50" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="2c0525d7e3bba47065d4a64b689f205aba48295109c7457b5d42be2bbd7053b2" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="e89b540ffabcef68806d13b85a7f85b472b6d2c9acb5e454efae533bafeb2b33" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="1a838ebe3cad29da920fe4249b394e31f27e1ee9b314f8eae64c9ddfb8a17879" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="777df8ec431e1ba56af513ade6bc3f6d3c1913bdbf1876523a655b857f5ea082" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="0b971e0e243fe83df3f6d2fa839232db903d5c6a25632ac9bc87bff755d710d1" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="065069c27c2e57f855d8570bd2194339ced46edb935bd5dfacfee0690d83d559" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="7db8f9fff02570d63fe5081ec1cb26ad6d56fbbb9b93292cf817d1f9add13600" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="5546044974127c6fb38282b05a3bed2d70afc524808c79c55c0cb176d1827ffa" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="8a7cfea4e4fd7a48fd9c2e2fd943122da0b7e4e8cb1c02fbb13fb547da865a87" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="e1c04fe0268e5f530cbcb628889cfa87943b96f00899c68b1ec571367fe0626b" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="2f79bd531830bbe0bf1ff3a22df4d9a5ae5a2ce3cfe358ff749b54f39951bfe6" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="e4352259f01f983cb9b8a95af9bdeb604a57be13a71f03dc076a45a52ba01d24" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="f836318439de4481d1a1c69a221362a7e333d982334d9f97ec7787e11b939376" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="2d3c44543a1ee0e0d150a840e2b7b8094e49062848624644ebfb77944c8132a2" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="7b0e38f54387c4c191f5f8837af78d490e4bd4d5dedb5c51c9fc56fbe3982b95" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="0f9d2a7eb79a338bb25561171fc79e6d0e1f09e9213d563a59562f5035a2b4c6" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="bf74359a845180138844beacd4cd87ab5840036ca1889abccf8f4ee54efe9d62" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="f2a14b19fd447d3634bd9e2049d0e85a6db01ba249f61e093c5dc58a6ffd6362" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="4e2fbdf3ec4bfa26da66e3b8974a632c1ad586e19de3025aa4238a4f6a29bc21" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="aff9e781e9de128a79d4bdb945ef6bc05281284551039420ef542a4c0ecb453b" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="b6b3c78fd8c7e86e6b9929e4a0ab796ed07c5ab0f3a6459cc5a1baf5c7cf162f" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="6f9f8e0156d4b6a781fdd6c2c6a0a87fb523dbf9fd914c0099679bfc78fd364a" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="fbd72a6cb400a211ab67659bcebd3a79932cf711399b009e35dd8ae2d36e2b2a" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="a3916f4b3d4956a41f9f31c541a84b0b5b6e8550facff81ac848d31942de54c7" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="dd7eab55f87a93e714926a95e6662790471baf3fe6a242be43a23760c7eda4ee" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="854546a4d80996189a90d85443443299f7b2389d1f88925b36154a23bd2f0307" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="7cf061d336b01f45c141697d1d3e7ffd4c754e3bf7c52594d0d8933bbf72db0b" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="675638b48f18d0832fa8a0e17a1e358b8c289b8ee8c70f9f7658ede4d5ab5489" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="93d7a48135102bf1ef1d814ebb6eccbbdef6468c3236bd076463526c3e3377a2" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="0bdd3e02b2d341f67a73b91eac9a9f89fa3d4d2d19d040991318411db7fe6e74" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="9ab16160cf6b84c342a146d1bd381faf0fa21c2ff48e2f6443b2db0d431df597" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="974b7453b05a6a2e31ffa536a802a1cebdaf48a8e8bb7932f6ab740281b8da21" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="2b3a5ee9c6c0f375a752d580a133d50b703a06cd396dcebee4b90716fba4e0f9" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="3ca11054138a4b0cc6f6f42c6f65fd5a8b1504c0225c42e1d9d7e173276b800e" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="506bf4838db3f02fa1aa32cbb582f98a7f0e22e77e353d2a6ff083f93b54024b" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="5c7077aadddbdee570cc5f27aa8a47f62f2e92b7e336c5b2606d6122cdcd9be5" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="2bf54b009102a625b6a52a37e8e88d0f8777786bb6c3bca814b3e4bf875b04a9" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="bb25f48d626277f7c274c29988b0e80a0c801eb7549071148e9e6ff3fe206992" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="9786eacc33199c566f332eb4aa0b54c4311bc670782909182ea5da6b9340f261" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="3c0f5d55da77e49d39cf5a4ebd5503bb88e0b67fe674542114eb0e0aac2abfc8" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="0b8dc44a5bc8782f4dd87a2a19dc875e332cce81d634b2c1caac33d10bbbf755" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="2de2260937fc1fa10a35d69d0d67dd4382bb6d9f59da4789e3b661b571479d26" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="b2380232dc2e89b30961786adcb6e966f3b03e455f605cb22db212d137721749" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="dfc096c1c2d1833437909fb11f829dc0094e382f5b2cef47a5c13e9cfa679d67" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="3b2f2b6311d791221dc7943eb6a246d48888634ea24e02bff5b90ea832dde08c" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="a2b29f7b2f0a4ece7fe89f1c7870424b6934b7caf5705bad11b88b454f183093" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="3f69bcbbf6f6af04b8149700598d6ef1481be94e74f68325614993c16b9cc3be" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="d91704e25d309832c5e2517355435763c727e345f74e9c7c79694518444a2e30" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="d1685c53fe6d7e7930dc4dcd7d88925413b4b30ef77746dcf8842e75702e9d85" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="184f0e6f4f32f86b3a2f538125231de0ef0d7e73a9c1531a7b770399f4e08b18" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="aa3644dda2a91f9c99e6765748070e07aa5fc160d81b2669dfdf3e4ac8b6a738" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="90ed336648d2fea0c5821bdac33d01141b1aa080798d295ab6b6ebcd16d739a4" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="ae4723fcddb53d44028a3c7a6347077d9d11fcf886fc246fd0d06546fb36b640" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="621c12dd9655d2380e621592f78f8725d784fc6dfab9d60150fb46c1af0016fc" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="5e84e03ec1ad5d486fd80fd4aa423e6a30cf26ba74098c7c7fceab4d4f24271e" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="e1cd274ed8c59f807124f7bd2fb88bc07a5876a3e871a4d34d0b61e37f68d61c" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="3a2a7925355d875b5400cf27b1d307b80d78560a9ee5af323fdc2f79b4a82977" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="69d4066ce53416805e418682a88a76bfa1e010f27097d601e7dd290b62b70e76" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="a44cf76806ecef5969a0830993cb6af442ac8b70ffe77a352c0e38990b6bd0db" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="e55de176150495fbbe95235ee12e45c59cc48a84fc5af4fe53fe3962030d5e45" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="ca58ff90a99928d3b74477058d48073a907c719149cbf8f77504cf6288e03166" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="42b1a5071f11cab160fc8133ef50597477086bd3db65b1b92c6a35cdbfcfe3d2" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="8a1a538769603d0fd9d30201e2faea28e4b240c3dbdf37bdc36adb8a010c4513" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="899cb4353eb98256677d5a8b738041b6fa71d26acb2df0c33bbf3f7198e7b943" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="33100e38344e3fdbc793a90452b34c6f7b56c32414a2eb90f48a3ddf80de2429" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="d23321c0fa103786be16fb6cc19a7ab6356f0d60e10911259a33bed99d138700" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="345b1c2ce2f09ae58381ea8ef7b0452075bec28370f3ce60faab3fedce7b1b1e" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="e0cf93d25c1596a8101cd7b5bacce1f82e4a23e088d4ea5814a1a83b2a016a57" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="a30f8d303f7b697feca382be7ce4ccd7a0aebf417bf7dc0843f541d6514eed41" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="83be557440b5fcef1a381543931d64b8ce7ed0bedec27bb3db949ac24cc7c849" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="c5be4142f481b2aae31df2a91c1521fcf54eb46428a5be0a7424001574a9f1a2" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="d3a5fc073fca86f28b944e6a87aed2d776494bca8e1ddb69532db8b6548b1aae" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="f541c65977b5ddb1e8954e4127f7d46c9836f169c2a96b03baf3da4ff22fb93f" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="4be1233523346276d4cac15f15f7117021cc4c158a9eecd679bac226c5fcaa55" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="1d03e27378dace602175c2aed37dae85dbf7d7c808ebe909c76bdab39cb4f905" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="89799acfb4b9b53976b0d173b64df618a5dc942037e44e43b514144206a92630" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="c27332684225c04de3368da24e21860457ba56303d5f699aa39627447098769d" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="416db436771b7ec19bd444fc85e38374105a80053e077db5fa78aed3768bd231" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="afdbfd48a7297f80083a3695ebf5f326386b77738a5166b3b6c8bc67c74170a8" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="7efe8826ae49b68b10337d41bed37abf22e12ee52d6ebdc6b75ffefae9e75fb3" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="513cf06bd7ad019b16e61986b3555341efb0a2a7d0ef2fef76b547449c2f43bd" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="912d6e5e78b84dfdca6320c8a968fff2cac18524070c34beac3ead9cf2b2a1c5" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="479d9de93c22320009980d3b852b6269748b33bf566ac03351763106c8f71c8c" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="bfae4a31cddb7d7cf7fa6d7a92ec15b7b85b7a6e059faf85e4112d57a25211bd" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="8ae2f2429cd446d5d472e012da3b5d11302c120bb71befc4841a47ba52b1b48e" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="6e7fba33d17db12881385cbf00e1d604790b683c310124297cb04fd38c75159b" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="29ae7e9d20e12b6be735dc0ab8d30d9e3e56b47ca27ef6487e8630c275e00486" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="144cddc15de0605ebd6e92b3c2d928b81dc2258f87a6d6adad3d27ba02c0ffa5" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="2ccf645b421a296f690a6b449d6aed31aa3424a1ad30144f15e020afa8e47687" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="f3c2075ae90b3aaee9b4255618542b170be8744f80e272e6f7c4023afd868641" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="57bcdd2216565f531a30e71de877f31fa62e3b6cc955d54a26c6415a6c6ddb8a" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="79f1d1a8ae8316efddf80f04ec3fb11decd8f8d8adc1768b3539262dd673d0b6" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="ae715f3497275666b814b83a426503d719b408c9bace6e1f1c6c6539faeb1911" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="4db522af79b855fa5de85b7edb8cac1a13f0833ca05730edfa3913809c42d8df" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="503ac9387858b1d56285682c7e76015b754e241738c4c2f84c0486ebc681f0f6" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="38229a49be96a22ff3afd8381d84b8923a55c8b11ffb1afcadf094003b72a75f" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="8c1af66f5fc40e9be978ef30fd7252d0e520b6551a0bd017c71d860ca637493b" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="e5e7c3a7aeb03cc8bdb5ec7bf070b5b14956da4888c4cd29cd37045428071953" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="728bc779b97794c07bbec25cfb1120ab588a8b61229a2769baf81162ae87dd86" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="2fdd111c4ea00805022213e7e9432b28036e9ecf7f3401a8a9b5a315cbbbca03" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="86ee7b714aad96b0e486f672bd845487ee963fd322fc41a1a40a30907d502690" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="b2491e3a946c65163cf078a0c51c1a105cf3905b2bb0817517b79a550d07d7c7" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="5c5446cc000f8139be1cca496eec874c059dbd7be437683ceff575f560bd0612" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="6e7889d4f1066ae961b7341d71c2438d1b289c025fdb97d0cf44356d06ef1f98" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="b96a3628ba3af4f4ca97e8c197b2fb40144ed5d42010733192fab489dc981a15" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="b1b5d8e0c0eca2d15a3d0a7c71430cb80bd6984c0beac7e85ea7acb5e7f5ae56" name="libstoragemgmt" arch="i686">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="a3589f30fec0b8a5bbfc8783cd508c5c9f2c144fb007aaa72eeac2047005547a" name="libstoragemgmt" arch="src">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="2e958a5daa580b621df1a953bf61c5d824519b8acb8d6c5323d00b529d688062" name="libstoragemgmt" arch="src">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="b8fbdabcf090a685f01c60cf76078d3551f3641ff281aa28d7dca814783bd416" name="libstoragemgmt" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="435aa786bd4be4e21703964354f15116a09c5b6efecb76885a0137b5d91c3f1f" name="libstoragemgmt-arcconf-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="a9646a1d04e66dc683ae8e159190566458acf130265d97c2dbc2ea7a357115ae" name="libstoragemgmt-arcconf-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="fce586400b2b73882f18e42af88ecd895513ca8cb584c41634c06ac01d0c884f" name="libstoragemgmt-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="2ba18f8643b29ea7ae7fde82b4be68ec262958f11bd47879603d0ae9eaf882a4" name="libstoragemgmt-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="e52ef2717a67a64ade30638f5455c4f57608a5a204c5e512fc811041c16fe478" name="libstoragemgmt-devel" arch="i686">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="096a25a2996220e1a26d7d8feac47b9bd92fa8ba6f2e51fc64a287541cb9bb45" name="libstoragemgmt-devel" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="0df3f04feb697cf92e8589cb2decca4dd4a7162664e09c765fd2756bc670edb5" name="libstoragemgmt-hpsa-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="838c6b6447e146b1fb188e8b13f72ca776ab242dc541f885a9cd2e37766583ad" name="libstoragemgmt-hpsa-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="546317e341bd45e0d80ae0fe6782b202a5ab77cec51f1beb3e32f1655c0d954e" name="libstoragemgmt-local-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="7f273a17e3475d106f546cc0299c797bb18b63021dc0c489fa1ffcf937c49c26" name="libstoragemgmt-local-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="4911f2b782b2d52d6d2d2fd534e1017bc9dd90c463008f70890e7b5f1214ef22" name="libstoragemgmt-megaraid-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="9155f6b47936c04bb924e7a82e7030520bc230e04641e2f7659b3379e80174d9" name="libstoragemgmt-megaraid-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="2f63a3a2b10bfa231dbdcddd6eee69ca292e30e06d1d3e361a274171b468348d" name="libstoragemgmt-nfs-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="2b8de2e1221b68892d9d30525e6b30d8deb53e11215f2b7cf77f747f1c417998" name="libstoragemgmt-nfs-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="b30822628cb0fcb5f273b9d1541ce7ba53b57354bb85d31f1775907fad601d94" name="libstoragemgmt-nfs-plugin-clibs" arch="i686">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="419dc7fee6cf0372e53a263e05c7b44212203ca4fe9371a7ce4f5890464d5872" name="libstoragemgmt-nfs-plugin-clibs" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="dfd0d5a7aa5397b1d6b0ea4ccac2b9c1779804d75dacc95e9636ed0067abc8d9" name="libstoragemgmt-nstor-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="b81fa04c74fb8700ef4e2e349d591d22b1bf04ecc0d0772d6af51b52e7534f79" name="libstoragemgmt-nstor-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="3bc140ca00e996815d548ea3d2a76535742bc2968b2308c26348b556fc19b8cf" name="libstoragemgmt-python" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="46843809866ba5f27ec6798f21f0290040ec598dd85a1fc460e748c3095307e1" name="libstoragemgmt-python" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="efdb62a90c21af7b63436ee36b96578cf9c9384e321396cec75318ceefbfbdca" name="libstoragemgmt-python-clibs" arch="i686">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="d243accfe2a177f8d7e46ff4ce9703f1030480b86640ffd88970f46f41ab00aa" name="libstoragemgmt-python-clibs" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="2cfbe57a74efdca535cc91e76bfad53eea653fa30ae697aaf93bb2a4dff4508c" name="libstoragemgmt-smis-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="e13b1a48111aae07e482abd2bfa230a32da7e180a621865527dda3f29e440184" name="libstoragemgmt-smis-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="d89f63fbb57b377be860bdbfb64fbc7b175fe263f0dc73480a3093e17a2b6db5" name="libstoragemgmt-targetd-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="b4ce04fbc46ac529b2727ed9a8d2f099279d12e50298d4ef76ce0d17059cd807" name="libstoragemgmt-targetd-plugin" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="9a52c98637aaee989c99aa9cf6e8aaacbe1a9ad6462276e2997fbe4ec1e899e2" name="libstoragemgmt-udev" arch="i686">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="6df512596b556846153b8b836e7caf45661423b516e5200da9ecc453df12e124" name="libstoragemgmt-udev" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="ae9dffb56e06558f5d7c26b120a90ae68478fc0a3c0c2c49743dc628c162a64d" name="libtimezonemap" arch="i686">
  <version epoch="0" ver="0.4.4" rel="2.el7_9"/>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-3" date="1385553600">- Added a glade catalog file (dshea)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-4" date="1385985600">- Merge fixes from lp:timezonemap
- Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
- Set en_name correctly (iain.lane)
- Don't call g_type_init() on glib &gt;= 2.35; it's deprecated (iain.lane)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-1" date="1399032000">- New upstream release libtimezonemap-0.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.4.2-3" date="1406030400">- Rebuilt for gobject-introspection 1.41.4</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-4" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-5" date="1422446400">- Use GPLv3 for the license file</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-6" date="1430481600">- Updated the time zone map images
- Updated the city data from geonames.org
- Fix a memory leak and potential crash with the locations list
- Cycle through a smaller list of map locations on repeated clicks</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.4-1" date="1431086400">- Fixes for LP#1440157:
  Port to libsoup directly for geoname results
  Fix some memory leaks
  Do not reuse GCancellables
- Upstream merges of SVG update and constrained location cycles</changelog>
  <changelog author="Jiri Konecny &lt;jkonecny@redhat.com&gt; - 0.4.4-2" date="1655812800">- Remove regions from the map
  Resolves: rhbz#2098126</changelog>
</package>
<package pkgid="8214382ab2b35e2e262b7737953a2a59bc4a001d38fd39ffa3c3ca7998df5679" name="libtimezonemap" arch="src">
  <version epoch="0" ver="0.4.4" rel="2.el7_9"/>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-3" date="1385553600">- Added a glade catalog file (dshea)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-4" date="1385985600">- Merge fixes from lp:timezonemap
- Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
- Set en_name correctly (iain.lane)
- Don't call g_type_init() on glib &gt;= 2.35; it's deprecated (iain.lane)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-1" date="1399032000">- New upstream release libtimezonemap-0.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.4.2-3" date="1406030400">- Rebuilt for gobject-introspection 1.41.4</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-4" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-5" date="1422446400">- Use GPLv3 for the license file</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-6" date="1430481600">- Updated the time zone map images
- Updated the city data from geonames.org
- Fix a memory leak and potential crash with the locations list
- Cycle through a smaller list of map locations on repeated clicks</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.4-1" date="1431086400">- Fixes for LP#1440157:
  Port to libsoup directly for geoname results
  Fix some memory leaks
  Do not reuse GCancellables
- Upstream merges of SVG update and constrained location cycles</changelog>
  <changelog author="Jiri Konecny &lt;jkonecny@redhat.com&gt; - 0.4.4-2" date="1655812800">- Remove regions from the map
  Resolves: rhbz#2098126</changelog>
</package>
<package pkgid="637ddf90ff90f28666d3f18292f6e1cc98348d3c826bd902786f2e99114c5978" name="libtimezonemap" arch="src">
  <version epoch="0" ver="0.4.4" rel="2.el7_9"/>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-3" date="1385553600">- Added a glade catalog file (dshea)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-4" date="1385985600">- Merge fixes from lp:timezonemap
- Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
- Set en_name correctly (iain.lane)
- Don't call g_type_init() on glib &gt;= 2.35; it's deprecated (iain.lane)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-1" date="1399032000">- New upstream release libtimezonemap-0.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.4.2-3" date="1406030400">- Rebuilt for gobject-introspection 1.41.4</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-4" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-5" date="1422446400">- Use GPLv3 for the license file</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-6" date="1430481600">- Updated the time zone map images
- Updated the city data from geonames.org
- Fix a memory leak and potential crash with the locations list
- Cycle through a smaller list of map locations on repeated clicks</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.4-1" date="1431086400">- Fixes for LP#1440157:
  Port to libsoup directly for geoname results
  Fix some memory leaks
  Do not reuse GCancellables
- Upstream merges of SVG update and constrained location cycles</changelog>
  <changelog author="Jiri Konecny &lt;jkonecny@redhat.com&gt; - 0.4.4-2" date="1655812800">- Remove regions from the map
  Resolves: rhbz#2098126</changelog>
</package>
<package pkgid="ba6c29ea8879697e3cc0a4342d3fbb641dedac1101ad4488fc08f95f97c1b1b1" name="libtimezonemap" arch="x86_64">
  <version epoch="0" ver="0.4.4" rel="2.el7_9"/>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-3" date="1385553600">- Added a glade catalog file (dshea)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-4" date="1385985600">- Merge fixes from lp:timezonemap
- Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
- Set en_name correctly (iain.lane)
- Don't call g_type_init() on glib &gt;= 2.35; it's deprecated (iain.lane)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-1" date="1399032000">- New upstream release libtimezonemap-0.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.4.2-3" date="1406030400">- Rebuilt for gobject-introspection 1.41.4</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-4" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-5" date="1422446400">- Use GPLv3 for the license file</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-6" date="1430481600">- Updated the time zone map images
- Updated the city data from geonames.org
- Fix a memory leak and potential crash with the locations list
- Cycle through a smaller list of map locations on repeated clicks</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.4-1" date="1431086400">- Fixes for LP#1440157:
  Port to libsoup directly for geoname results
  Fix some memory leaks
  Do not reuse GCancellables
- Upstream merges of SVG update and constrained location cycles</changelog>
  <changelog author="Jiri Konecny &lt;jkonecny@redhat.com&gt; - 0.4.4-2" date="1655812800">- Remove regions from the map
  Resolves: rhbz#2098126</changelog>
</package>
<package pkgid="6edf473b32df9ef3bf53dfef3d8dca2bc48c88024109a661d77997f78d8e493a" name="libtimezonemap-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.4" rel="2.el7_9"/>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-3" date="1385553600">- Added a glade catalog file (dshea)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-4" date="1385985600">- Merge fixes from lp:timezonemap
- Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
- Set en_name correctly (iain.lane)
- Don't call g_type_init() on glib &gt;= 2.35; it's deprecated (iain.lane)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-1" date="1399032000">- New upstream release libtimezonemap-0.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.4.2-3" date="1406030400">- Rebuilt for gobject-introspection 1.41.4</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-4" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-5" date="1422446400">- Use GPLv3 for the license file</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-6" date="1430481600">- Updated the time zone map images
- Updated the city data from geonames.org
- Fix a memory leak and potential crash with the locations list
- Cycle through a smaller list of map locations on repeated clicks</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.4-1" date="1431086400">- Fixes for LP#1440157:
  Port to libsoup directly for geoname results
  Fix some memory leaks
  Do not reuse GCancellables
- Upstream merges of SVG update and constrained location cycles</changelog>
  <changelog author="Jiri Konecny &lt;jkonecny@redhat.com&gt; - 0.4.4-2" date="1655812800">- Remove regions from the map
  Resolves: rhbz#2098126</changelog>
</package>
<package pkgid="016c01bae2a6f28a8631747a64a0fc161a74f055c17b353d07534d90dbbc6721" name="libtimezonemap-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.4" rel="2.el7_9"/>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-3" date="1385553600">- Added a glade catalog file (dshea)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-4" date="1385985600">- Merge fixes from lp:timezonemap
- Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
- Set en_name correctly (iain.lane)
- Don't call g_type_init() on glib &gt;= 2.35; it's deprecated (iain.lane)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-1" date="1399032000">- New upstream release libtimezonemap-0.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.4.2-3" date="1406030400">- Rebuilt for gobject-introspection 1.41.4</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-4" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-5" date="1422446400">- Use GPLv3 for the license file</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-6" date="1430481600">- Updated the time zone map images
- Updated the city data from geonames.org
- Fix a memory leak and potential crash with the locations list
- Cycle through a smaller list of map locations on repeated clicks</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.4-1" date="1431086400">- Fixes for LP#1440157:
  Port to libsoup directly for geoname results
  Fix some memory leaks
  Do not reuse GCancellables
- Upstream merges of SVG update and constrained location cycles</changelog>
  <changelog author="Jiri Konecny &lt;jkonecny@redhat.com&gt; - 0.4.4-2" date="1655812800">- Remove regions from the map
  Resolves: rhbz#2098126</changelog>
</package>
<package pkgid="fa2b196920808a16b1c739f60e04879d5e61b2cd87470f66ac517633a9129603" name="libtimezonemap-devel" arch="i686">
  <version epoch="0" ver="0.4.4" rel="2.el7_9"/>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-3" date="1385553600">- Added a glade catalog file (dshea)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-4" date="1385985600">- Merge fixes from lp:timezonemap
- Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
- Set en_name correctly (iain.lane)
- Don't call g_type_init() on glib &gt;= 2.35; it's deprecated (iain.lane)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-1" date="1399032000">- New upstream release libtimezonemap-0.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.4.2-3" date="1406030400">- Rebuilt for gobject-introspection 1.41.4</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-4" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-5" date="1422446400">- Use GPLv3 for the license file</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-6" date="1430481600">- Updated the time zone map images
- Updated the city data from geonames.org
- Fix a memory leak and potential crash with the locations list
- Cycle through a smaller list of map locations on repeated clicks</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.4-1" date="1431086400">- Fixes for LP#1440157:
  Port to libsoup directly for geoname results
  Fix some memory leaks
  Do not reuse GCancellables
- Upstream merges of SVG update and constrained location cycles</changelog>
  <changelog author="Jiri Konecny &lt;jkonecny@redhat.com&gt; - 0.4.4-2" date="1655812800">- Remove regions from the map
  Resolves: rhbz#2098126</changelog>
</package>
<package pkgid="0b0919af40e0c57948e4da1fc2995ccb138dd7cc56f6d78e56263143b80833be" name="libtimezonemap-devel" arch="x86_64">
  <version epoch="0" ver="0.4.4" rel="2.el7_9"/>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-3" date="1385553600">- Added a glade catalog file (dshea)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-4" date="1385985600">- Merge fixes from lp:timezonemap
- Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
- Set en_name correctly (iain.lane)
- Don't call g_type_init() on glib &gt;= 2.35; it's deprecated (iain.lane)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-1" date="1399032000">- New upstream release libtimezonemap-0.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.4.2-3" date="1406030400">- Rebuilt for gobject-introspection 1.41.4</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-4" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-5" date="1422446400">- Use GPLv3 for the license file</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-6" date="1430481600">- Updated the time zone map images
- Updated the city data from geonames.org
- Fix a memory leak and potential crash with the locations list
- Cycle through a smaller list of map locations on repeated clicks</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.4-1" date="1431086400">- Fixes for LP#1440157:
  Port to libsoup directly for geoname results
  Fix some memory leaks
  Do not reuse GCancellables
- Upstream merges of SVG update and constrained location cycles</changelog>
  <changelog author="Jiri Konecny &lt;jkonecny@redhat.com&gt; - 0.4.4-2" date="1655812800">- Remove regions from the map
  Resolves: rhbz#2098126</changelog>
</package>
<package pkgid="474d71608d7c85bb00fde8ee0c45f9a2ad1984d3f5bd7009a95af86287acc320" name="libuuid" arch="i686">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="8da42bf1080e809dca18036a6deddfe1b04f79ee8316aba9eea94b9ae4bc9349" name="libuuid" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="6726c10a21d2e469bb9623833254231bbab990573d54cb6e6e89601b0a6cf538" name="libuuid-devel" arch="i686">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="687a3c46ee4e45e777c21c3c13e564c9f83cbf1902bc8e6ec6997ca68b3bcc89" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="87bc1e07ed1a7b5b4c7ce2ed1e725672ff8121457af9d103041f1843e66c9e04" name="libvirt" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="0745bbad7b3ce5983aec49133713c11b92b1520804a8a876f3efee7b19acffd6" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="00d45fd7261483bfb4754d5439c9cd086a65910662a1a56ca3a711f2d1fe862b" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="1b328eb3ede8d935799dd6e834f93cb3ba2aceae31ade62bff3e451afa3e3f17" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="557daf3a28c26aaeafc0e165bff91ce4ba337ab57a07ab0bbe0b73cae641783b" name="libvirt" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="62ac15c0ffd3216991022d2df84cc37ddc3d00d75619a5b02f97926f4ddf512b" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="23f31ec56318e8e4a996b494b3e3a6103282b1ddb2536b314c36d802a7ba7748" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="5e4957293b00ebcaee8e246aa71632f5396627bb67bceb6a7998d3d2b8aef8cb" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="0c844671a51d0f77d3807b625e5abf8e980f9349bf652f11f486018e1bf82645" name="libvirt" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="1bf9903dba7dc397bbef3cafeb8173033f5da9a20ef3449b75ff4ae109902175" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="1fd02a27ffcc9dbf317653b88e8ca0b1fc233d49b48cccf0efef3471305a115d" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="88cf70277d18a28232b7445d4662f1b19941f596029aeabab7079bb29a00f662" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="09113b1da1c86545698e7fd5e0ed0af209c798f8c66a63c4baed271e2f752ae8" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="727757acfb2dd22d64eacd53d5be3bebb22acec9b4712f7c5a9bd4572889d11f" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="d176f4b77aadad29c6543b41f98300c4da4031231a95dc74b0cdbab6f70d3dbb" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="008c705d4f106a4d3f8eadd6f223b47c73f3209b723cfddfadb725341f9fde29" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="566ab741380be11762d49148e0758649b07f9ea964a8bd63299e12d13bbe891e" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="1db4c8a64e14ce5aef066d962a731b4533723a2745f9380402c8c194035a0f20" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="5eb3b6e577540ab2964290c470d111f9faf6b35b56a0378cde528aff01502dda" name="libvirt-bash-completion" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="2511e7d04a36830f3f2b7db1026d8b77f99366a5002b0723e19cadf9b14703d0" name="libvirt-bash-completion" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="9ae83c77f1673e1a67cc6a90272a314188b306f386197b7319d0bb09bbf5d3fb" name="libvirt-bash-completion" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="85beb4a8a578c6830bbd2074c6c591ade92c95657ebeb29351bbe37d1008184e" name="libvirt-bash-completion" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="5aae31f96c1cd4e7f3888c29fc753bfd7c46232ddb3ac0b21cb03d5e1d55e26a" name="libvirt-bash-completion" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="c9955d5f79a87186539e15b14d1382c77cc175fb873ce96d08c3daef773b7dea" name="libvirt-bash-completion" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="77596c0d2a7eedf0143f134364d7a75d2a8f1b821780953efbea399397257443" name="libvirt-client" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="3397c9a802183db6e8a4496428d8f61c0a013e877854d655fb9570691528d8e9" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="ae01eb11be9b8c33d289269a00200ad9f5173ddcdcb722bcbc63a42f213be60c" name="libvirt-client" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="277e4fb82fa48f26702032307ffa3367b7f84e2fc19b43f28c257c4efcd2d4ac" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="43da14adaf3a895fa4adae511b5c9b319a20077aa6e190852b81d0726e43a242" name="libvirt-client" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="aa1e36099e2689b2b6690540dc9406f33b1c6b70d4108a499a7132a1813459b6" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="e36c12eb6400f737a31a051351cd37b812cf8828dd1361acb374eb3532163e6d" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="668cc0d6c13507ed1adaae46fcd4fb5d183a5f677e7e5a413942cdc81f08eadd" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="41d6ffda3ebb445d29e20f700b71b03091f9553a68131f7b65c3903371b733df" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="d68a3d54914b2b538749ac10c37e65f19f30d86485fbf3cc10f56e79f595d65e" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="f47f3c231c00e60b4396a677224cce03ca25588ac6894cf2b7f6f8719cdcc10f" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="3dcbf3f4daf3970f806e300d52363d7baaf6354d17e29b6845d2658b3d72b825" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="9fc9cd6d5d4bf20aa26524f2f71b44f462dbef0e852cdb7c7ad97d628d404605" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="0a33ba726993e439710607eb1018587997be8d9615b214a361456128ffcd7629" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="f7e99b674c50ba2988ce2d7ad376e16993f455346c95506932f2f2c2f39964db" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="da4181b3010d67d3636fa93905f970c4886ba33b8f176000b81484185438deb0" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="9dabacd14c4bb853906ccd04ed4e71b501b19d2c46fe3c5a2d7ff48c92fb558a" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="478359c1ee7b32b6e16caabb69ad4f3e15cc32623afbc0f29069be6a112e55d6" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="d9c54cca8c96b953a5995b656547106136eab4ab5f691c25999cd4012363eedb" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="bb8bcb511b38a29ffa3039e863345924d2ee4492d3f9f5081e1661cbf7a2dde9" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="6cecee6982c021ad827f93570ac5390d2374640e3bd23cbcc8eb808c5701352e" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="f054f7c7a086fabf755165b7e57b37bed95587e2dcab4ff4551a1fbb1afaa751" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="481c1eeb877fd3c203820964591e1e84c8a26d731685d12443daade3645c5f44" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="7a0b95ae96464f28b1d4e987d99e891016a636afebe8cd0d8125df7a0d8cfdc9" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="552b259c2c8ddd316294f99294b999fb2a098277727dcc7449f67d945682ffb4" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="0445b5b7d7e6a34ee504021a1640a3feb7acc83395b366dc99445d0bc86d2889" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="0a2306d8ac13128da1a96242969fe113d5e18c5f6e5faa53fcfb29b5a8616084" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="dc23af06bff43f43af48023e054205b35afcffdd5df52db944d637d00b3492f5" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="74bba0d2c852dd7b866664f2cf4aa688044ed441f4cd69c28a0b9c3583af3eac" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="3a31768307e9d880db53c634271025683bcf9cd12e1e8c966d9bb9e864716a24" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="01203559e388bb7f374277829bc3de9336987894a5497bc401e506e66c886fb9" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="261427d75e9419361e4292b54062031b9fe9b2721962daf0b9a3803029d8c699" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="f6d53a069cdfd428ff20a3ce06d53e97b53e55b85fe0eaf4a40f24000ddaea01" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="f24747085ed4074ada902de74836fa4d4891c3171b5b6502a77e163b6b8a0c02" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="862960af8101a78b8fbacebcade2dd86301d6aa952c24330f488d90ec017dd82" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="551bd7465d5104850365ad1bfc4a19f88abbbad1796fa19c147190854d3a762e" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="7bd71652692950a3a63932769b92dcb436feb0c27ad286797eddcaae7a5aa481" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="18f72f870467b6ed788588cafbff044b65ff890ca69c436f5a2d9941276551a7" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="8cb9f459308b6bd569ec8cd89ac2ae12ef044ad46e3218513e943e9d31b219d4" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="650fceaa1809a3fe257cb0ce63b12378765a23e69b23e7a2a9a011f827af99aa" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="bca40fd078379cf63acc3b91c9bbb2a9a51a8cfad34270e8b2aecf81e377b9a2" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="3d42c0859bb7b08eb5ef114fe84b673a51d6a86b43ab429e8a08301ce1bd48d6" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="89082e4531a09e25b543e1e4dce4e56ded87f8a64c59fd5af4d9d908b103687f" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="611e9495dd047cb6e4f41a544eb3741b6a49d1b337f7ac9dc35bb318a92dc867" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="401799e36d80a11517b8932274d206496dfc1260368bd5f55dce37761a7d3db5" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="c06854b47a895d959c7d08ad6855b04171ccdab087ff95be7bd8ce530dd74610" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="e63e2c60681187e616423acc3637afdfec04e5a13553608271eb9596d215bd9a" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="c766056157c18b35314abb7fa5df47c5a86a558238ed844646e5c1e30b5d6b8c" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="2dc0c9082e8122e3f96cef05ac9b47fbc9b1db4fb91b159909e3d43bf0453105" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="1a59b64740822fcf157d3c68e9631b1e060c33f054a58a9a8d2619306ab3b523" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="de49053ac0d97d7dd321ae88139e70860031b947d742f82fb3fdaeb5a549f973" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="81534226e78c485e980fad153510622a4e6d25186a60364f172448b3584e3a3e" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="1df5ab03e202a2afe9db6b2f573d2f2b7f30cd9a2cf593838ed54b97f1270bc5" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="3df3c761643c583208ada41f99f52209b0a156530621863c277224adc19be92d" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="c6c821ebdea45393168d5bd366dba4a4718e08ad9b8f64ba01b2b0b89c65f7ea" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="860a2b7147927013d78e5e447a1a34cd363aa7294db226d84ff305dc2c83e587" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="bd6a4b580b3a1b473ec9e24aebc58a776b4e848b62d05b456aedea2f062a67d6" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="1142495051dcf157179f59ad6d1ed9b3ad10756b0cb78a46e4523070cf5ff8aa" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="4a464639f8fbf93e3019535d74833d16c14062e2ff434dcb94c9e4729bb13fce" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="3af7d1d5d0bd1f5cde7df4bfd854fb0be001f6356b6fa94aacd53648d90ea9c1" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="549c4a9ef5d08e3525c08ddf0523a7c0828c4882f04309c67a1c6321e0ef8987" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="cd0f8487c9c21a45af3c9525196d6caa479db3159bc73e4d7577b870b54bb6a4" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="15d20bcc50fd4f63fcb17c4beb58498c93e8041ea95f7f10ce916adc971fafc0" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="957c346313fd2c246735cfd853c90a14b693a82221b9bb31d736ae71c3c6825b" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="c4dbd72ee58974e02e701d86be57dc071ef88c3e92b4b725b1e7d26cb0d17b68" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="86782aac931f37f706ec2fa409bc9ec80c7479e310db4e0184b2486be19d0a73" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="fa8b65602af2fd3552d52248d0bb235fc7cf6ff204f6b1f847d2d4eb0413da5c" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="8020ef0575ee7d9516cd9ca1302d73b161cab6ff74977c1bc3001dafac088bbd" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="88520b590091cd683b5c13fa33c3d2a1351faad8aaa798571f91d7663aab2b3d" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="fa960c43b4d7282b63ccc3baaa12fc0d96ab24d3ec4197433647098578a51c26" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="9bc38dcacefa04f131b5a78de06d3d08fc20f70a03683ce7741ed7373beb86b7" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="0b8bf840b4f48d32d004d4b19e30688999170602296fbe51a0d13040826095d8" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="620cf9da7483aa00035242d5b713a0ba210e06c900df037c26ca7acc77d7d885" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="5239e73cc5546cfc32f0942cdd225207bd9ce87598078b99f94f1c28391585dc" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="05baa1c61bf838eb99d1ff18e3989c96a8ffe637ba54dc140fc6967b786b8430" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="6ff5e22c4aa52065ce75c67a80108ce17be6c1b402f5bb7a22786e125455c513" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="cbdaacaffb934337dd773d9a2cb16245b85a0b2104b275fec304210ab57070be" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="4ee83ba09b1259cf4d233c93ebc3312ecc5df3b913031850cdc1372b932aaf16" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="a5763e7f9fba7d139bb77c2d0769413840d56c27efe83a7341e42f6bd6a0a4f0" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="db47cd000075515d9b64346b9ca4722586ddd4a3c31895184d5e32f6ea7ca11d" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="554b4c105c25373f8f33d006fb77d636904e36fe12c60b4641a0696687f8445f" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="708d7faf87d4bcbbfa3f36b233dcfc4b0ef003a0cb4ca2ecd4a0072193869969" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="7ec591528eb197be5d5ccb38f0eb589012155b50fc3487e6067e24bb88c1d804" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="19ca4284d0f69176555d8a194456273bce1c283cc4f48a8b816b39a7ead5a6fc" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="9396d9305e98635a53faffcb41034fcd72be53c055d20abd1419a3ef9e0014bb" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="22889c78665bf74fa49a1d7b884762de66523149cf76647e1f5430a17c7ad1db" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="2cf9031e93a9c6350a78fb33215d8b186fe095765d722152df3dddd324a1775d" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="35df5284995cc63d43e698eb1d186e14e9c5d538055fbd5cd33b183761d0dbbe" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="6153ed1dd0720a38422c818d8ba52420642e4720b7149f9501c428c353b32ce9" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="c0f13ec5148c7a9bcecd6282dcd9787e9e111bf976386be38ee60b6bf19b3e71" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="6d44dbd90932dbba49eccf31ff45aeee98c13949156e695b2c040982e42e677f" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="375831022d9e6f6495e179c21c2c2c5a4bf7208a91c8912304ab6f12174e0251" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="ff8447fd6391890755675d963db4ee534437123b40817e8c4b6ef3460a28956d" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="006f6a08d8fc7c0bbd7e2f9e6cd0291658e4be133bf4bc87bc4a1c26fbcb8212" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="9a6adb9769ba3fdf83561af5fbaea9e470ecd24322c07f8880e3336856b8412a" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="6d34040aa10270ea9053cc6f17508220396913cc206da82dcb9d9b8a583901b8" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="e42c4452638ad854b95546d1c00ab91c4ffd741b6532f5035485ca233296fcfe" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="afbcfa8b830fbe0f7e10b0ed50af22be33d8aaf8b5ddbd2f3dc7579cae7e350c" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="8ee24a824104d4f673a70dc387ea6216c108b420b33c81df05fb8b59b3d65979" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="a2173dc45f800220cade1ad1ddfec81bd5d82fd3b6b5f22ae8e0b39aa4492c34" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="85cfa6f5394056b5d85064b56b9aa832b0a462828c2c0345541e17688ce1b332" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="cdb1e99bd3dce7946c48374b82401880836d028c717c577bfe86f0f81baef3ce" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="e328558ee145663836ed34acf8301e19628316f4c7abcfb3243f82ba31a7004d" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="9ee1ea87c3a37bc59cd643e118c7ad1470d6bb533606b40df29d8463e814d2df" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="be822402c4be1f219f3c193404bf6af1ad8e02d409539d7e579a5d139beb5ab1" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="79b8a280e7818c9e150b3618ce4eb294e32fd93f364ab405a12e3ff502ad0c1a" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="db800695908cb8d11084555d63f26361a319259510b0a11ef45e05e27e14846a" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="02332e9fe6e8f5e3ce256ad4c6c887ea448a1bf3d1a1e9fb9df6450f80660629" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="84e0fa2ed35c3b55f4469c4827d7a54f0045e8a7c2b20d1234c5c56970cd81cf" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="679595427a89e33da4a2493c66e12af299b5d1440e51e690fb57d4de5e975d8d" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="cf8413effd2c75659183dadb460a9451de672ca203d83bc9e005f7ea98bbd962" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="f189e5b780ab08a4c561b318b1967edd976f016cfc3802267cd2a66e4a3fc144" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="c2f9e24833d410e804171bd68d3fb4dd5c36ba78fcaae5caf7f0636e26f6b214" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="5f670232cc0799fe605f8af72f34c6b157162435362edd17fd1ef776d926b870" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="cd7b782c8ae8bc05d03fea99b0292ac35abc2187bab2b8aa3b6868ddf0b6ecc7" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="ee0af7bbe90590be55e32c328222202c3dcd9d6904afe7446f4c319678f4a867" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="bbd0de50f482ffa33bd1fc07723f666c4a2ced9c62b7de5b6fba4f458c2b86b1" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="852d0df7fb928aecd44cdd53f72ceab05954250395af6a6168316f688530f377" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="fef0fa9c2151b0bd09577d217bddc6fde41582853249b001bcaa38f946951910" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="2941d20a4f9b659216be2af67af7e34b0baf6fa4ab25b6eeae70fdcf1db7496a" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="23fc0fbd0dde6f3976583dd671afdeafa0904052fca13271d6d4b556396f5d7f" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="46b8e13b96714c8869a7b125fba6e18201eaf9494757c24d089961f405271cf4" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="d147b07109a96b297764b2d70166bf8f0b7c11097a1c62c2bdc5f8aec82c714a" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="1ee5c1da37970cc4350ead94ba37ce33858100680afe3abcf64ebcb7b9db0cc0" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="f30f54cfc6a32598c4adfdafdd8e37752b947bce907ef7a7284367a3f8ce1b7b" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="93bb4eab45cb0c6fab6a33398af81d18f69f793b06f2c01fa135a01be6883cee" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="ef43311bbbabda2af9398e0e4ebe4de05aaf0f6151d61f63b12e9774227f6792" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="28c12504c71bf7d1b4ee27a8b403d007c1bce5fdb290bdffebd2ddd285f082c7" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="e2881179098c95daeed5c1b82693df115ea22542045947694d4a7394deba0027" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="191fa82384446d522dc33c0eedab97b53557a6220d48bd4a55d24611b477c02e" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="5e53fd2196e2739be75eb9be9d5c22e8c607febacc241a6479bd3e5ed3679b0a" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="80585f9c2431477f661e81c405dfce7f50fe751639763a5c4f5dda8e871a3159" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="c3218a483af7eae2f3a24290f3805a52888505cbc5eefc06dd3e90363195ac27" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="bdd5459d35d96afd7fd3999d1b4e2f46d0d1f9d30574aa77c7709caa7713c6d5" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="bb301632251ef49eaa7733e4a8b84b5f184f0ffb7d7ef48cfac158e5f6b2490b" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="71739263e5c3cb22d65b4161fd2883a35e5f670b2d7e4b18693d5ce7ac850ffb" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="3d906417dce7f76da82f55aa4231aee316f755391b94ec553d0f1860fd06dc30" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="ca6d4c6bbb1cb7cfcbb7fd170b9b73185e5c168c546166f4f1839ba0c7c3e145" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="9946912c3b4ce28107818d8bae53c19f9a8041427177256e9d9d0545273e353a" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="3d19ef61e204e080f49dad8bdef2d40e5b2d5121bb58ea78ffdb178d2bf138ae" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="57e29da0f4584350140f1af5428c9685536be4dd2d77bb7ce77108f8f17b04a0" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="56c05b1bf064017917e3c19ed5e43cbab8e1d3a522fdf5eed2cdee4129326b3f" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="c638bd2aaee9e4bc0f6e6db1dd44ab8a1dd94a4e7650774b6855773a2fa6de47" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="4799cf78415f6e7845fb7b82f579b18e39c1645a157fad423babe941fd52da56" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="aae6262f9e79539c943649d65a11e61faf6a62c15b53ad0adbcd424ec062c6bf" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="e3bb2c0e387c0234ebbdd932176bb44491039945ebe3cf4dcace40442cfcff7f" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="9db82c327658bca914505df2a9c68df644f20051aad05dfa7a9b2373c95da1c2" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="1ffa9e739f5971c0ba736f0426899cd13f9f5e012ce0fd1307b751708c52f6c0" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="b92405894b9517a6c04f6bac58c09eee489e1d36ddb0f189b5d6214b2b2e819a" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="a9f9e8f197573a84e2ce63683aae4dbcdd59afc01ade8c1606011c03c3a394bb" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="1fd27b029c0eaf3267d22504364eab38c29f62e057d14ceebbe638b9c43672dd" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="5e34ac20105dd5290fb82baf21d36c102638dcfc73b44ad35bd05f7112bfcb2a" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="35956cb8d11751edbdc24999c25f058f063b6b37c07ab8a90772b5c1c1f2f347" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="ae8007b3d057c4692ede1989e6d6eadcaca4d1b16e4ed8b1133c5de6b1b76ac2" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="9ddd8531dee15e7487dd40818066b1dd5487b833bc25d662d9ea59f7b2aa7ce8" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
</package>
<package pkgid="89ede8a7be4c861f9514b1a7d5a152e7743c2e1be44e78ceddd1b2059b26e167" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="d6966fc0a8ac131a0d6ed0c2900ed79f03100e8880a0a65460690220c017f0a9" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="1c3d65c34e35dc430e338fd435c892c80ebf0e3cb8c9cffcbd1f6f6322590bbf" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="aa7b819f1671c1acc2158ac52fbadd4c8949b06f47fecba284f7c7d4c46d9874" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="4d6dde13bdce640b925a5d61e97f94fc7b636c211e36d7ec63053c9a0e2d0bc3" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="0a59d1f5955aff4837c82a97226bfb446ecf080b0fd2edafbd14b2d748d8fedd" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="f56eec75a7f1d8bafff6d700e33e6ee2ae8542211a9d0afbd8023ed243af1a2f" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="0d48d4cf46c56a858419d80af0bd25f86b42a240edc017d2ff7c74484e240d4d" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="e7b5a0fed41f73f1e45ca130aab86d97ee6a78e993829b3680c0a57a4a6d5a40" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="2c949ec6791d62fbfe76a8aa9d8e2634f63833e7d17445176015d98aef440b36" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="ddbe7787e3da26d34baca174266bc46556719ba218616410eb722bb4395cf5eb" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="599a2d6d87accac60f4d82569b1617ad1f98b2041dfdfa4ea708d36eed2f097a" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="9fafcc2d92cf201b9f50f8f79dc5a070b5e1c3489686b4cbaf7f991a329a6949" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="094a233a295889ec423466bee6b39c44f7ba393d283dd640c8a550ddd1d5c877" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="b3332161a54f7110805bedcfb340c64fe76cf3bb8ba9fbc9b1f9287ded66cf68" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="d8b1558ceabd44d33bf191133f2ab6e43a11ae54eff542667178c13f9042b6a0" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="0d8b81ae264975fe673513a316a7a55ece801dcddee321b3b16bd7b3e2978dd0" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="e6e25ed163c742439749a77f8cb251b835aa36699febc1b2c098192009ae989e" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="38055d103e666735aefae5c7035b539b85f4908742069bc604a3ab280cf8ca7c" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="7d7c4b786b8901151e5ca592bcced2158f54ea4aa16f9e820d317219babec66d" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="f6a1d902c9ced0ca236230103818ae3bcb27c61a6f06fca61a8680efae8c0220" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="98d2d2fe83181421fb75116d3d9019c33db2bce11756d7b46db51f8208be4fa1" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="46fc2f6ad4bb02155a507454b80d8089fb4ddb514f4244eb2cc6b3b17fcee74c" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="949a04cd44f47682a6a6fcbec465a905f2aec828f4149b9db6db39cab18d8925" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="6c5a9c2ad32a2e47dcbd0e3c16fdaea1d8d82f8518edf383d2e41aba0439f1c8" name="libwbclient" arch="i686">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="2a22f57b8b462f2a0c44ddf69d4dcb3108453867fa6cf7a3eb92ace67534e771" name="libwbclient" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="e18b489a8a06de74d77511bd5db7cc788f7d7c6b6b8761c7b080e24ab01c1b75" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="b5f7c333aec11e3796ba71d7e9635737dee97f8d67ae9b2a95e45812f1fd0e17" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="439fb3ca6d2236eead915449b2f4e1b1f417c13e10c8b751a4d89d6e2c571294" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="d0bc639924499fd58f2a1e8b3aa3018f9c9498982164318ebaf9618694d74f9a" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="8903a54ebbb9e85af9ff95db1fe36e51139472195d295a6638b150460284243b" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="81e25e1742d2d3915f2fe966daea3c2f6b5f2c1dbdfadfbd3fb1cf9d64c88162" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="96b2209de404d956ce4bb609a645dcc14528c1790be32abd5f1cd513eb9dce2c" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="602485ff2a2bbfa89768e211c6cdd24958736cfb4f0b6fdd50cf3fec48b45a6f" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="ecf06d09809b6a97f500b8d25fc9bb15b87169196e8202733664d6b84c00b518" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="71d1c4c555f9fb2900314a3e96f2392889acc4c2f652ff7feb4aeff531a58690" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="0b13e05fcc3eea0cfc899aad64ec4cc33a82118eb3487015f8befe3e1752e916" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="48f28d268a0c2ddbae89849702ccc635fec9140f38e03880af094872eab3e1e2" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="38c6ba7439a7204ec0855187032aeb92ef8d364c163578054acb4fa552bebec1" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="151cd79333e39745e4a6418a7693671e6c1b1b39be0293f4586b8adce0f6ae1b" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="c984b439cb4c111f25e8f42614cfc400cdd1b68807c9a86594e5cbf88fd48a55" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="c6b62bd7961afb637b78e7466f8a63314a82052dbef5a7ad2046b2233c5af75d" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="5720ad8022b2844a912cfd0afc01745c986b0a5f45b36d6698e439cb5c13acd2" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="a80c360f57308cb268644aca18fe72179821fe1631a582f60d1ee89cc6217a02" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="3a18abef641afa11b9cc005159decdd7aa06418f9e2d00da5a8a886a71edb865" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="1d86d42a31d9183932f9ded18f99e93889a50c765ed39cb47e7285f6416772fc" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="a580be462392c8b617b0858830c0a1354da8e0b99482f11bd36196e29a0d09f9" name="libwbclient-devel" arch="i686">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="fe31fbec4cc938b75cb41652747b3d2ace97d6e9e8fc3dae6269b9cfef1d2ae5" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="a8dcb7fae0749cc726afcbcf1f5529748117b5101a29187d2ea29315d9912c26" name="libwebp" arch="i686">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="c5bf14d7f5854be44e139204927084de4ff769cef9d2841afa8677693546ca17" name="libwebp" arch="src">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="ea0bd23796e76dbe880e0f2f36fdd9fd8050002404f8f4208f892c00575fa2a2" name="libwebp" arch="src">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="9960f8794f0a5e5d6f840a11cb13c1921d514ebc6b6d1237e3bf0ef1369fc00f" name="libwebp" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="818785d072f36a8bf3f11a97a7130f7a826e0da5ae402cccfaf32f46f72cc899" name="libwebp" arch="i686">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="a185cd203ad99e43aef7959f98a2498c0e55156b0d1f534f94bc32152be54351" name="libwebp" arch="src">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="42f52919597faf2037667e64ccc2ed6a59f3585625bd23147b512c99e452b10d" name="libwebp" arch="src">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="2db792a320849e57c0269298b187b42fed2eb4de9854a129e675f0fce005a06c" name="libwebp" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="9dc72fa06051a47d322f93631de1c2b61ae06c74a197637d70077b0c411495c2" name="libwebp-debuginfo" arch="i686">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="07d13698ce6d0b0b21ec721593384f2f33a958c2d87a79b33045cea19f0bf38b" name="libwebp-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="984a5f98e0a935f71834dbe82691479b993bfabe0070dcb5d02d8c2fdb247f8d" name="libwebp-debuginfo" arch="i686">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="c6295b031a99410013ae930e78f8e02fda7e33ef8850923bfa76dafa2c07c79e" name="libwebp-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="dd1690b225f410535f04c554107279e1c5a35413e5fedca6f05cdf29f1303115" name="libwebp-devel" arch="i686">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="c5bc8756236af369a718ca2cee6df3defd6a7ef330881a07b605d60b16bf0ea0" name="libwebp-devel" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="a03c5545f47e3bb1f988230c8ab6f97c52a5773bdf72984ab21a26a7d606e87d" name="libwebp-devel" arch="i686">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="764179c690d80429993bd7cb831d9d1faa95442ca5885a3e0d5c29d1bba8dd2a" name="libwebp-devel" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="6e0fbf96d0b5b52ce3f6b60a65cd63400cc8e41162c16d6104aa12380daeb0f2" name="libwebp-java" arch="i686">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="7d07a69f4d3cf8c908103564d365e9e329d3c243fdec5b285cc194777b6f6a87" name="libwebp-java" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="bcc4ffd47b587f5165bd8af07859d5a5e677a2c8bbe4718e47739706e5ca98ba" name="libwebp-java" arch="i686">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="ee276c7dacb9ea028568f5cdd7cb52702f67d31394edd47f1530ce3268736e3f" name="libwebp-java" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="032cf3cffc2ae2c2c29c1f8fc223ffd552f49307fc15ced52c8afc656dd55d12" name="libwebp-tools" arch="i686">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="c07950f74ecf35ebc95a6e3ad26ba0f5b59537c7349f392685865b841f401d24" name="libwebp-tools" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="dc794510cff1ae132d5580b346b59bc18a529865ff01e9d740f7430bc423583e" name="libwebp-tools" arch="i686">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="d6ecff20f89b1aa923ef1c1eb5895798d66d4b0bc73029bee80b6fe550d0caaa" name="libwebp-tools" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="1d6aedfb6a1ec9f348fec2edec6b0a414fadd8213b595a5be128a81299da47d9" name="libwinpr" arch="i686">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="12211e0382682f7a5714015d353e34cd56e1e529e7d09feaf568b83886a51fd0" name="libwinpr" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="79784d691556d07b86842a84b24d10ed4e9ff3bd6ec0601aea2b1f93fbd9845e" name="libwinpr-devel" arch="i686">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="d2af4a1198a7935cfccc26e1710adf6c05d36665d94761a1761e3e8d83452f4d" name="libwinpr-devel" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="7902bcac669a1148112c40e6c62ad72050e530d5a2815fa4086f1d0e01a8bdf6" name="libxml2" arch="i686">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="88539abf598f081cef9543545b09c5706135f1de260660537dd2577254f1dc05" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="2c610da59978376d4c9fed68bdad24c96cdbeb0550c6ca2a51f96fa4660a248e" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="2af68f6e633197a3e7040b3662e34d937eb4f0f2b71ef39c6fcb19996e9c2446" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="3b750cf47b745edf9256e2973dd18daff05a7a0f43dea9b713fb09e9c4f57848" name="libxml2" arch="i686">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="d4fa9db4f6a10dc3c32ce2803f29233858ebf54aa8b5c983b10885c0f0796832" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="b355abdba7a78979d406d5efe11f81cc12020a9cb49dceea40e7c0ca25d0dfe4" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="cff205247e2745e1fd953f3d7af9afb0b77659c226b243442cfeaeefd0d7818e" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="08b4122d67bbc1e00f6e834d0edc55405e14328444e4fe3b1a94568a620541c8" name="libxml2-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="943d9668be083f540834fb4ca8b4c9afcdf6bcab07058bed11776099c013da81" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="111f3aa6438891f9449993eba51d690ed3d61a3a0cc2862dd1c0de0420f1c30f" name="libxml2-debuginfo" arch="i686">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="5f6638ad4bb53107288b1a8eb0e14742b14e96e65d6204103193718401c0b414" name="libxml2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="363534a81e687ddc2e310789850eff44e47a8e335005090d0d866ea582058687" name="libxml2-devel" arch="i686">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="6390f7cffbdb22b587f0438eb674c18e2e91f154746d171c2988765fc3516700" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="e95c2c5607c98982a44bee523ae61bd0b69cda70ecc6a9dd487dd15267a1ba53" name="libxml2-devel" arch="i686">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="4ebb57bc3ee8c9c00dad147d34b51b1573bee1d3a94a0d2ea2fa2b54be27544f" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="526aa528de9e6c6fc5a54df91eec1aef22c957bf5bf64b496e675fb9d75c6aa1" name="libxml2-python" arch="i686">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="a0acd21373d78cad7eefe776490785dfe39ca1ba30a65ccf4ca5bdaeb8ab95fb" name="libxml2-python" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="2c057b5e058f72c76aeb99d39b940acd87385e98940b188924816df1d7e2220c" name="libxml2-python" arch="i686">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="252113d425d50deaf3f8245e95becf8c532d5e8adfb6a0c09e3c6c7159ac9a48" name="libxml2-python" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="ccd661fdd5453e33dbbfe691319f98c5f4a6ce0aa2f570d78079bbece6b75408" name="libxml2-static" arch="i686">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="a96a9bd914894457ff3abde92aa27b213bd7bae4087e759a8ffc8d8ddcb2cfae" name="libxml2-static" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="6.el7.5"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-2" date="1384516800">- Fix a regression in xmlGetDocCompressMode() rhbz#963716</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
</package>
<package pkgid="fc67579bd694b7415987cd99edf25588c8484d0fc5d03c48e1cef89ac137ef90" name="libxml2-static" arch="i686">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="417abcd0545c9a5c55cf589615e5062fb274afa1cf3e40c55cd118b7377e86ce" name="libxml2-static" arch="x86_64">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="b4a5cf18dce173294f840620c10984468af306dbb9fbaa1ae8317f13ceabb735" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20200421" rel="80.git78c0348.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="1be0c27d30730f7ba2ce4a64abc6a8e462d02c3503d675a87ea7123a9340a503" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20200421" rel="80.git78c0348.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="3f24c2e2c2712fe7ea2157c075df70a6e92e80917abae5ecdec827594432494a" name="linux-firmware" arch="src">
  <version epoch="0" ver="20200421" rel="80.git78c0348.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="b77a73b4f33bf3c558804be472eebfb6045bb9ec559d2c26e5c31012aa357a97" name="linux-firmware" arch="src">
  <version epoch="0" ver="20200421" rel="80.git78c0348.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="b68cbc9be89ac27278fb68bdcefdecfb87982c805a06a30c8dbc6de0f9b58bf4" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20200421" rel="81.git78c0348.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="7ed5271484358ed1dbc1acce0b3bafe747e45a2fb7b7a34a9a8fd9f2fdcdc238" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20200421" rel="81.git78c0348.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="1d0ab865e9346f98e8ef380586cdd59b79a0bc9f4227933898be7c54ef6ae74e" name="linux-firmware" arch="src">
  <version epoch="0" ver="20200421" rel="81.git78c0348.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="a0b12a9674f731174ce7ad9c6bf7c4f1358a7d7f835f1fe19792c3fa6c54fc61" name="linux-firmware" arch="src">
  <version epoch="0" ver="20200421" rel="81.git78c0348.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="4e51829e5edaba997b38037485c92dd704dedd1cb4d85c5b24e7c272a5f20989" name="linuxptp" arch="i686">
  <version epoch="0" ver="2.0" rel="2.el7_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1.8-4" date="1504785600">- Resolves: #1487522 - Race condition in phc2sys</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-5" date="1508846400">- add support for active-backup bonding (#1002657)
- add support for IP over InfiniBand (#1472880)
- fix handling of unknown/invalid management TLVs in pmc (#1459446 #1459449)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-6" date="1527681600">- add support for bonding to timemaster (#1549015)
- improve timemaster to restart terminated processes (#1527170)
- start ptp4l, timemaster and phc2sys after network-online target (#1541991)
- don't forward management requests to UDS port (#1520366)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-1" date="1553169600">- update to 2.0 (#1623919)
- add support for more accurate synchronization to phc2sys (#1643977)
- add support for active-backup team interface (#1650672)
- limit unicast message rate per address and grant duration</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2" date="1553601600">- fix comparing of unicast addresses
- don't leak memory when allocation fails</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2.el7_9.1" date="1624536000">- validate length of forwarded messages (CVE-2021-3570)</changelog>
</package>
<package pkgid="c1185c8f400b5d772b41139b3ecb478a6828e98955995cfe5c3d7ae4c773631b" name="linuxptp" arch="src">
  <version epoch="0" ver="2.0" rel="2.el7_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1.8-4" date="1504785600">- Resolves: #1487522 - Race condition in phc2sys</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-5" date="1508846400">- add support for active-backup bonding (#1002657)
- add support for IP over InfiniBand (#1472880)
- fix handling of unknown/invalid management TLVs in pmc (#1459446 #1459449)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-6" date="1527681600">- add support for bonding to timemaster (#1549015)
- improve timemaster to restart terminated processes (#1527170)
- start ptp4l, timemaster and phc2sys after network-online target (#1541991)
- don't forward management requests to UDS port (#1520366)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-1" date="1553169600">- update to 2.0 (#1623919)
- add support for more accurate synchronization to phc2sys (#1643977)
- add support for active-backup team interface (#1650672)
- limit unicast message rate per address and grant duration</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2" date="1553601600">- fix comparing of unicast addresses
- don't leak memory when allocation fails</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2.el7_9.1" date="1624536000">- validate length of forwarded messages (CVE-2021-3570)</changelog>
</package>
<package pkgid="62aed68aebd990f1bbbac925b54be0a117a7902b2a59f3589da587955f9bb211" name="linuxptp" arch="src">
  <version epoch="0" ver="2.0" rel="2.el7_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1.8-4" date="1504785600">- Resolves: #1487522 - Race condition in phc2sys</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-5" date="1508846400">- add support for active-backup bonding (#1002657)
- add support for IP over InfiniBand (#1472880)
- fix handling of unknown/invalid management TLVs in pmc (#1459446 #1459449)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-6" date="1527681600">- add support for bonding to timemaster (#1549015)
- improve timemaster to restart terminated processes (#1527170)
- start ptp4l, timemaster and phc2sys after network-online target (#1541991)
- don't forward management requests to UDS port (#1520366)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-1" date="1553169600">- update to 2.0 (#1623919)
- add support for more accurate synchronization to phc2sys (#1643977)
- add support for active-backup team interface (#1650672)
- limit unicast message rate per address and grant duration</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2" date="1553601600">- fix comparing of unicast addresses
- don't leak memory when allocation fails</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2.el7_9.1" date="1624536000">- validate length of forwarded messages (CVE-2021-3570)</changelog>
</package>
<package pkgid="b4ecc118fd8f5d168c29b50b430d2678cbe7a5d0298aef1b1ab5f9ecee9d9896" name="linuxptp" arch="x86_64">
  <version epoch="0" ver="2.0" rel="2.el7_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1.8-4" date="1504785600">- Resolves: #1487522 - Race condition in phc2sys</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-5" date="1508846400">- add support for active-backup bonding (#1002657)
- add support for IP over InfiniBand (#1472880)
- fix handling of unknown/invalid management TLVs in pmc (#1459446 #1459449)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-6" date="1527681600">- add support for bonding to timemaster (#1549015)
- improve timemaster to restart terminated processes (#1527170)
- start ptp4l, timemaster and phc2sys after network-online target (#1541991)
- don't forward management requests to UDS port (#1520366)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-1" date="1553169600">- update to 2.0 (#1623919)
- add support for more accurate synchronization to phc2sys (#1643977)
- add support for active-backup team interface (#1650672)
- limit unicast message rate per address and grant duration</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2" date="1553601600">- fix comparing of unicast addresses
- don't leak memory when allocation fails</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2.el7_9.1" date="1624536000">- validate length of forwarded messages (CVE-2021-3570)</changelog>
</package>
<package pkgid="b44f0dce632c78924d9cb8870d86d5839493a55449a0cd958a8643c2e6b13c5f" name="linuxptp-debuginfo" arch="i686">
  <version epoch="0" ver="2.0" rel="2.el7_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1.8-4" date="1504785600">- Resolves: #1487522 - Race condition in phc2sys</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-5" date="1508846400">- add support for active-backup bonding (#1002657)
- add support for IP over InfiniBand (#1472880)
- fix handling of unknown/invalid management TLVs in pmc (#1459446 #1459449)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-6" date="1527681600">- add support for bonding to timemaster (#1549015)
- improve timemaster to restart terminated processes (#1527170)
- start ptp4l, timemaster and phc2sys after network-online target (#1541991)
- don't forward management requests to UDS port (#1520366)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-1" date="1553169600">- update to 2.0 (#1623919)
- add support for more accurate synchronization to phc2sys (#1643977)
- add support for active-backup team interface (#1650672)
- limit unicast message rate per address and grant duration</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2" date="1553601600">- fix comparing of unicast addresses
- don't leak memory when allocation fails</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2.el7_9.1" date="1624536000">- validate length of forwarded messages (CVE-2021-3570)</changelog>
</package>
<package pkgid="0e8be99b2dc528782ce95d294d65ab45078227a2a24a11661959309e350c8142" name="linuxptp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0" rel="2.el7_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1.8-4" date="1504785600">- Resolves: #1487522 - Race condition in phc2sys</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-5" date="1508846400">- add support for active-backup bonding (#1002657)
- add support for IP over InfiniBand (#1472880)
- fix handling of unknown/invalid management TLVs in pmc (#1459446 #1459449)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-6" date="1527681600">- add support for bonding to timemaster (#1549015)
- improve timemaster to restart terminated processes (#1527170)
- start ptp4l, timemaster and phc2sys after network-online target (#1541991)
- don't forward management requests to UDS port (#1520366)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-1" date="1553169600">- update to 2.0 (#1623919)
- add support for more accurate synchronization to phc2sys (#1643977)
- add support for active-backup team interface (#1650672)
- limit unicast message rate per address and grant duration</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2" date="1553601600">- fix comparing of unicast addresses
- don't leak memory when allocation fails</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2.el7_9.1" date="1624536000">- validate length of forwarded messages (CVE-2021-3570)</changelog>
</package>
<package pkgid="95c8a8f28f9a56964f8460f9bd38fd0c87b914ff2eb2797b70db1bf08b52f85d" name="lldpad" arch="i686">
  <version epoch="0" ver="1.0.1" rel="7.git036e314.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.9.46-8" date="1395230400">- Ignore supplied PG configuration if PG is being disabled (#1067261)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-9" date="1403870400">- Fix IEEE mode DCBX (#1102886)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-10" date="1413892800">- Sync with upstream v0.9.46-123-g48a5f38 (#1087096)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-1.git986eb2e" date="1434628800">- rebased to upstream v1.0.1-23-g986eb2e (#1175802)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-2.git986eb2e" date="1439380800">- convert from sysv shm to posix, to allow selinux restorecon (#1080287)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-3.git036e314" date="1467806400">- 1273663 sync with upstream v1.0.1-26-g036e314
  system capability incorrect advertised as station only</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-4.git036e314" date="1533729600">- fix the OID printing routine (#1551623)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-5.git036e314" date="1551182400">- Fix memory leak on TLV reception (#1196320)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-6.git036e314" date="1567771200">- Fix lldpad dereference NULL (#1513337)
- Fix ecp22_start() failure to create object (#1510945)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-7.git036e314" date="1657022400">- Fix compiler guard</changelog>
</package>
<package pkgid="99befcc711ac875358ff659522f4d130fb7211f88ab6c5a3a7b544484d2ff15f" name="lldpad" arch="src">
  <version epoch="0" ver="1.0.1" rel="7.git036e314.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.9.46-8" date="1395230400">- Ignore supplied PG configuration if PG is being disabled (#1067261)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-9" date="1403870400">- Fix IEEE mode DCBX (#1102886)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-10" date="1413892800">- Sync with upstream v0.9.46-123-g48a5f38 (#1087096)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-1.git986eb2e" date="1434628800">- rebased to upstream v1.0.1-23-g986eb2e (#1175802)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-2.git986eb2e" date="1439380800">- convert from sysv shm to posix, to allow selinux restorecon (#1080287)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-3.git036e314" date="1467806400">- 1273663 sync with upstream v1.0.1-26-g036e314
  system capability incorrect advertised as station only</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-4.git036e314" date="1533729600">- fix the OID printing routine (#1551623)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-5.git036e314" date="1551182400">- Fix memory leak on TLV reception (#1196320)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-6.git036e314" date="1567771200">- Fix lldpad dereference NULL (#1513337)
- Fix ecp22_start() failure to create object (#1510945)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-7.git036e314" date="1657022400">- Fix compiler guard</changelog>
</package>
<package pkgid="fabf0977a87e0df4b9fa0f7900355d3005c34129613bd4ed8d4ce5a7be763214" name="lldpad" arch="src">
  <version epoch="0" ver="1.0.1" rel="7.git036e314.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.9.46-8" date="1395230400">- Ignore supplied PG configuration if PG is being disabled (#1067261)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-9" date="1403870400">- Fix IEEE mode DCBX (#1102886)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-10" date="1413892800">- Sync with upstream v0.9.46-123-g48a5f38 (#1087096)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-1.git986eb2e" date="1434628800">- rebased to upstream v1.0.1-23-g986eb2e (#1175802)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-2.git986eb2e" date="1439380800">- convert from sysv shm to posix, to allow selinux restorecon (#1080287)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-3.git036e314" date="1467806400">- 1273663 sync with upstream v1.0.1-26-g036e314
  system capability incorrect advertised as station only</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-4.git036e314" date="1533729600">- fix the OID printing routine (#1551623)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-5.git036e314" date="1551182400">- Fix memory leak on TLV reception (#1196320)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-6.git036e314" date="1567771200">- Fix lldpad dereference NULL (#1513337)
- Fix ecp22_start() failure to create object (#1510945)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-7.git036e314" date="1657022400">- Fix compiler guard</changelog>
</package>
<package pkgid="3a4dd339d8d05ad3664173c1d259be1638a0ee28a3bd3f3a1462bcd031493457" name="lldpad" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="7.git036e314.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.9.46-8" date="1395230400">- Ignore supplied PG configuration if PG is being disabled (#1067261)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-9" date="1403870400">- Fix IEEE mode DCBX (#1102886)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-10" date="1413892800">- Sync with upstream v0.9.46-123-g48a5f38 (#1087096)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-1.git986eb2e" date="1434628800">- rebased to upstream v1.0.1-23-g986eb2e (#1175802)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-2.git986eb2e" date="1439380800">- convert from sysv shm to posix, to allow selinux restorecon (#1080287)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-3.git036e314" date="1467806400">- 1273663 sync with upstream v1.0.1-26-g036e314
  system capability incorrect advertised as station only</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-4.git036e314" date="1533729600">- fix the OID printing routine (#1551623)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-5.git036e314" date="1551182400">- Fix memory leak on TLV reception (#1196320)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-6.git036e314" date="1567771200">- Fix lldpad dereference NULL (#1513337)
- Fix ecp22_start() failure to create object (#1510945)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-7.git036e314" date="1657022400">- Fix compiler guard</changelog>
</package>
<package pkgid="29650693cd14d4202d2e99060fc80585750b3b9a8c401b8e22444836b118ab62" name="lldpad-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.1" rel="7.git036e314.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.9.46-8" date="1395230400">- Ignore supplied PG configuration if PG is being disabled (#1067261)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-9" date="1403870400">- Fix IEEE mode DCBX (#1102886)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-10" date="1413892800">- Sync with upstream v0.9.46-123-g48a5f38 (#1087096)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-1.git986eb2e" date="1434628800">- rebased to upstream v1.0.1-23-g986eb2e (#1175802)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-2.git986eb2e" date="1439380800">- convert from sysv shm to posix, to allow selinux restorecon (#1080287)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-3.git036e314" date="1467806400">- 1273663 sync with upstream v1.0.1-26-g036e314
  system capability incorrect advertised as station only</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-4.git036e314" date="1533729600">- fix the OID printing routine (#1551623)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-5.git036e314" date="1551182400">- Fix memory leak on TLV reception (#1196320)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-6.git036e314" date="1567771200">- Fix lldpad dereference NULL (#1513337)
- Fix ecp22_start() failure to create object (#1510945)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-7.git036e314" date="1657022400">- Fix compiler guard</changelog>
</package>
<package pkgid="c640d3880f43663d689de329eb4a7203846c859f6009ffade226231c6b00a8bd" name="lldpad-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="7.git036e314.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.9.46-8" date="1395230400">- Ignore supplied PG configuration if PG is being disabled (#1067261)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-9" date="1403870400">- Fix IEEE mode DCBX (#1102886)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-10" date="1413892800">- Sync with upstream v0.9.46-123-g48a5f38 (#1087096)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-1.git986eb2e" date="1434628800">- rebased to upstream v1.0.1-23-g986eb2e (#1175802)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-2.git986eb2e" date="1439380800">- convert from sysv shm to posix, to allow selinux restorecon (#1080287)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-3.git036e314" date="1467806400">- 1273663 sync with upstream v1.0.1-26-g036e314
  system capability incorrect advertised as station only</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-4.git036e314" date="1533729600">- fix the OID printing routine (#1551623)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-5.git036e314" date="1551182400">- Fix memory leak on TLV reception (#1196320)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-6.git036e314" date="1567771200">- Fix lldpad dereference NULL (#1513337)
- Fix ecp22_start() failure to create object (#1510945)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-7.git036e314" date="1657022400">- Fix compiler guard</changelog>
</package>
<package pkgid="8fbae18c6f5f2c6045efa4f4bdb0ad07c582bd58a4e875f4b63119f254b35099" name="lldpad-devel" arch="i686">
  <version epoch="0" ver="1.0.1" rel="7.git036e314.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.9.46-8" date="1395230400">- Ignore supplied PG configuration if PG is being disabled (#1067261)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-9" date="1403870400">- Fix IEEE mode DCBX (#1102886)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-10" date="1413892800">- Sync with upstream v0.9.46-123-g48a5f38 (#1087096)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-1.git986eb2e" date="1434628800">- rebased to upstream v1.0.1-23-g986eb2e (#1175802)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-2.git986eb2e" date="1439380800">- convert from sysv shm to posix, to allow selinux restorecon (#1080287)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-3.git036e314" date="1467806400">- 1273663 sync with upstream v1.0.1-26-g036e314
  system capability incorrect advertised as station only</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-4.git036e314" date="1533729600">- fix the OID printing routine (#1551623)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-5.git036e314" date="1551182400">- Fix memory leak on TLV reception (#1196320)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-6.git036e314" date="1567771200">- Fix lldpad dereference NULL (#1513337)
- Fix ecp22_start() failure to create object (#1510945)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-7.git036e314" date="1657022400">- Fix compiler guard</changelog>
</package>
<package pkgid="5254f4fbc1a9bdd50691e725260ad68124f89d17da2d326d6c71ec4c9a0f25f2" name="lldpad-devel" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="7.git036e314.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.9.46-8" date="1395230400">- Ignore supplied PG configuration if PG is being disabled (#1067261)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-9" date="1403870400">- Fix IEEE mode DCBX (#1102886)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-10" date="1413892800">- Sync with upstream v0.9.46-123-g48a5f38 (#1087096)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-1.git986eb2e" date="1434628800">- rebased to upstream v1.0.1-23-g986eb2e (#1175802)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-2.git986eb2e" date="1439380800">- convert from sysv shm to posix, to allow selinux restorecon (#1080287)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-3.git036e314" date="1467806400">- 1273663 sync with upstream v1.0.1-26-g036e314
  system capability incorrect advertised as station only</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-4.git036e314" date="1533729600">- fix the OID printing routine (#1551623)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-5.git036e314" date="1551182400">- Fix memory leak on TLV reception (#1196320)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-6.git036e314" date="1567771200">- Fix lldpad dereference NULL (#1513337)
- Fix ecp22_start() failure to create object (#1510945)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-7.git036e314" date="1657022400">- Fix compiler guard</changelog>
</package>
<package pkgid="2a300fa79fbaf20b40f4bbb93657b479bdb3d1630ecfe2435d502ca6e6fca9bc" name="log4j" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="18.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-17" date="1639569600">- Fix remote code execution vulnerability
- Resolves: CVE-2021-4104</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-18" date="1643803200">- Fix Unsafe deserialization flaw in Chainsaw log viewer
- Fix SQL injection when application is configured to use JDBCAppender
- Fix remote code execution when application is configured to use JMSSink
- Resolves: CVE-2022-23307, CVE-2022-23305, CVE-2022-23302</changelog>
</package>
<package pkgid="436e559340682a794cac965eec25c784fbb16a12b70106b4c4527f0e3327b457" name="log4j" arch="src">
  <version epoch="0" ver="1.2.17" rel="18.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-17" date="1639569600">- Fix remote code execution vulnerability
- Resolves: CVE-2021-4104</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-18" date="1643803200">- Fix Unsafe deserialization flaw in Chainsaw log viewer
- Fix SQL injection when application is configured to use JDBCAppender
- Fix remote code execution when application is configured to use JMSSink
- Resolves: CVE-2022-23307, CVE-2022-23305, CVE-2022-23302</changelog>
</package>
<package pkgid="f92eb22429d873614e159f7ab0433dc1343b599a401b7242e55275ea81c9260c" name="log4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="18.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-17" date="1639569600">- Fix remote code execution vulnerability
- Resolves: CVE-2021-4104</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-18" date="1643803200">- Fix Unsafe deserialization flaw in Chainsaw log viewer
- Fix SQL injection when application is configured to use JDBCAppender
- Fix remote code execution when application is configured to use JMSSink
- Resolves: CVE-2022-23307, CVE-2022-23305, CVE-2022-23302</changelog>
</package>
<package pkgid="e87c6bbee0abcfa227140d7489a18d7c5226225c1d2f6394a4b7b40509b8b20b" name="log4j-manual" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="18.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-17" date="1639569600">- Fix remote code execution vulnerability
- Resolves: CVE-2021-4104</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-18" date="1643803200">- Fix Unsafe deserialization flaw in Chainsaw log viewer
- Fix SQL injection when application is configured to use JDBCAppender
- Fix remote code execution when application is configured to use JMSSink
- Resolves: CVE-2022-23307, CVE-2022-23305, CVE-2022-23302</changelog>
</package>
<package pkgid="03bd159b62bbb231b9974929a858500402fcf80d7d312621841e36cff744918d" name="lvm2" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="17139d706e148f842f09e8d66d1617a1e37c893cac0df772294a522e80769f22" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="376f7bb16d89ecb30c72faf426bf9bc2da8bc48a98494539f6152a05096c7951" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="6b569275c08286e3cf435301fb05a36f3d78edf95888ee697e2b764a3968caa0" name="lvm2" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="04d73d3fb1686d3c6d77f6c4ba25e7c9f7df89023ab7e2f53d2ea0d3e04a9524" name="lvm2" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="1695c7b2b3f575f4b81e98f5bf08c3068d5a58a1ee2775c169f95fe0860dbf01" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="07cef4ef576176a0642569e14db84c331080dd1b64b8644f79db99fb226adbf6" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="ad9d461a1ca5bd719e9cd879d9565bc0cc1710d24c845fd718a9124ebfa37414" name="lvm2" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="c246f0389c8d25d876063346fa418a6db53bc6fdd99777f700508db1c6e327a0" name="lvm2" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="fab5621794fc5fa7ad9da1c4258c4457dcab14f91ffc22ba391ae62f8ed98330" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="43aef659a60d39787c415edd99726f1f3f7440d48e948c64a0cba44ad7182864" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="3b19f1b2db0262f07e9f7f175aa84a67b4ba98761910d170aa277005982bc4da" name="lvm2" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="03b8411b6155309693d124d5df6aadfabfc37df42558790fa38855d0b9ad8538" name="lvm2-cluster" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="be0d5d0a4ba4e45c807d89c5cd90cf2ccc9337367e00bb68ced48d3c908054eb" name="lvm2-cluster" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="8ae8b7ae38c40cc08b294441acfa482e3de82cc8e59b091e04b7ab997e3b31a1" name="lvm2-cluster" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="c51a40d3c990ec8de5e3ea7e4f29322fed86edc021d9aac7fc103c061eb09a2b" name="lvm2-cluster" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="4a3d22046cfe332d25c22093957069bee7e4c0b27e754274ff208a35eec3e978" name="lvm2-cluster" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="864913b09c2bd0aace91705611a2f69f253916b1dff9c435c9c259853d4f6c09" name="lvm2-cluster" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="e0b7c165402cf23d7a76b2c84b1496a04e58b8f5dbb6040c1a6e9847b04a2a2a" name="lvm2-debuginfo" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="7bacb60f62217a9c050c07d5388bf55f09f42343bd8719c1303532de92225c6f" name="lvm2-debuginfo" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="4f7791f49549f12a6899ac385ddb2d52cf67d4cddea377c103220049e3dd5107" name="lvm2-debuginfo" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="ac07a85eb34785fb7ca002e57f700bb8a958bb726a64e1d4d372adf03dbf2e2f" name="lvm2-debuginfo" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="452841757fda0fb6ec704ef3cfd9e72767e11bee252c8b88c0f2694d096144c9" name="lvm2-debuginfo" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="7c766950c69b6d4171db0a443abd4a5f4274efe2dcee09503f87644538fd4ae4" name="lvm2-debuginfo" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="430c0d31874ae04c941d5ee5eb95ac65894663b52b512e1bb614ab3e5d6cc116" name="lvm2-devel" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="dcfd6bfbacd1e320b83251de78601b378ad559bdbb54188cdca2121012f93902" name="lvm2-devel" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="2ccced3cb4e835131a76f6b9467586f6399a18f394d6785265d15ccf09a4fb7f" name="lvm2-devel" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="df19ee07f9da2e20d834b8d253d4356932a1eed83c974bbb2bd0ab35ea83d87a" name="lvm2-devel" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="661eaf8500819d69095a7e8bdac6e46c5e953449d32b8f29bcd982d69a1ff1e9" name="lvm2-devel" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="6c0b9af59b0eb18609556e11c056cd4ef495f1b765b289a3282339c8df81d1f2" name="lvm2-devel" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="c9ec42ebc1207603265b3c0e7ef8ec980d18030befc793f41b4353ab096205fa" name="lvm2-libs" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="139ced6c5f0c41aa6d837a4dc340e9c16751c2d857b5fa843fd693a83b1fb0a4" name="lvm2-libs" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="ad8214a056c328cb77161ffd9b60234cbef17594bc26ee450f84daecb119e932" name="lvm2-libs" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="86dbb06cf1d1970c85d9993a4472bd2a130841b5a6f4b08c7faec9349b06a190" name="lvm2-libs" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="51e70b27b7faa1046260900c652d5e657030c17f5b62ba24b2e537a27171fd29" name="lvm2-libs" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="ea7278964c39290657fd4abb984c2a61c8443da0a97ab78efaaeb8748ad95a20" name="lvm2-libs" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="bd4387f924495d4c9c1b6c2cc4f2374a3e49fbe50e765f87e81a8fe02feb1626" name="lvm2-lockd" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="cb8c8ea69b1bc28affb050e98f6f05c2f1a99451f1e7211c9ce9094cefc49fce" name="lvm2-lockd" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="b75c58d60915eb6d7ced4b6868ca935c4ea1573953c19a3066ee81fac1d0fa48" name="lvm2-lockd" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="a19cdc0cc5bbe9b81c9cf89ada7bfa0a74a275ce158d09668dc093d23720b943" name="lvm2-lockd" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="58ad8f15ec4de275642d33391f1e2e09e3e049b47fa0291b9a22bcdd8171b1d1" name="lvm2-lockd" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="76c8bcb87e1111dd4d62a643f6e401075a89fe83925c55572b6cbce2ed365c95" name="lvm2-lockd" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="1f48154cd2a1f5cbcaa161f85b7839b1c8bb911142915607fab8057a6198a700" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="1.2" rel="2.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="26a86aa248feb5bdaee71d6cfc8b19084c7b049b87acecea2862d969e5b1ad45" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="1.2" rel="2.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="2711b0d61a8a0b3449429d8b1856e4237c6c6cafdc21da952c98d5b3bd89541b" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="1.2" rel="2.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="4e3f38aef687d8207ab948e23446d487ece3776e5af76cd6c0207edf9f0bb269" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="1.2" rel="2.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="9afa3f602ea65f7ba90450b6a34f4c0150177c6c0d9757ceb5ecaf6684e17bba" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="1.2" rel="2.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="a9973edf6fda52106ccabc58a0bf99a80143c0b364bcf30ba4a0dedd9476c785" name="lvm2-python-boom" arch="noarch">
  <version epoch="7" ver="1.2" rel="2.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="5bc525eebee94ef6fb2172089fa82a734e8171cb0383e1f141f9750bcaccc344" name="lvm2-python-libs" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="8720b361c5fc499f6b2487c427caa17758f87a05cb6d1d994b1d81d50b242bed" name="lvm2-python-libs" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="d05098fcb27579f27ac16a0ed84a9f2fc719b2c593cc584f0f31bbddbf5a1e69" name="lvm2-python-libs" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="cbafdf76ec3c7013fb14e51c482eaf686120b296235ac410332e90eb058c98ff" name="lvm2-python-libs" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="796a5e5c18a0c0d0577f21ea050f051caf3391f1cd81aa3c6c5208003c6f1c6f" name="lvm2-python-libs" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="a4bb79a7fbd5d49a8b090b4aae5f68391089959e5c10a98f58246082a91ecd1e" name="lvm2-python-libs" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="2e88e0248eff366db14a723132c85e7fd7968822fd3b5d6ad220b82b6642b520" name="lvm2-sysvinit" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="1dacd9f9dc3994787d51595d466e5781519bcfc83ce5861f45cbe49e7557c069" name="lvm2-sysvinit" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="1e7fbffd6f45ab18e3494ee0707787c21adcf3bc38285034bb27cd69b3a7deac" name="lvm2-sysvinit" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="eaf932ead5163091b5ebc558bf99e14d2d0493f6aa38d94095a347f5e717279c" name="lvm2-sysvinit" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="cdb8804945e1a581ef09f6ee28a6c910fb781b319e7eeb4dd052ccec7e946b42" name="lvm2-sysvinit" arch="i686">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="e86131aaa8a994372641a6d7017de0b0b1f744e3f1db056434dde0df4ed88a4e" name="lvm2-sysvinit" arch="x86_64">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="dd59ae2c3259bd6dc44e0d34d397effd0954de7a1476da90c86d606456bd9f0e" name="mailman" arch="i686">
  <version epoch="3" ver="2.1.15" rel="30.el7_9.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-25" date="1518782400">- Resolves: #1545973 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992000">- Resolves: #1545973 -  Add sanitizer for XSS mitigation</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-27" date="1521547200">- Related : #1545973 -  Bump release to override rhel-7.4.z version</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-28" date="1563796800">- Resolves: #1718180 - Try to decode member name first</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-29" date="1564574400">- Resolves: #1611689 -  Trim long text in "no such list" messages</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-30" date="1564574401">- Resolves: #1599692 - Sanitize input on listinfo page (CVE-2018-0618)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.1" date="1636459200">- Fix for CVE-2016-6893
- Fix for CVE-2021-42097
- Resolves: #2024884, #2020688</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.2" date="1638100800">- Fix for CVE-2021-44227
- Resolves: #2026866</changelog>
</package>
<package pkgid="293f561448a6e655a4cbbfacf65a0a528b1fc735ebebf2e191183f1419b91417" name="mailman" arch="src">
  <version epoch="3" ver="2.1.15" rel="30.el7_9.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-25" date="1518782400">- Resolves: #1545973 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992000">- Resolves: #1545973 -  Add sanitizer for XSS mitigation</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-27" date="1521547200">- Related : #1545973 -  Bump release to override rhel-7.4.z version</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-28" date="1563796800">- Resolves: #1718180 - Try to decode member name first</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-29" date="1564574400">- Resolves: #1611689 -  Trim long text in "no such list" messages</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-30" date="1564574401">- Resolves: #1599692 - Sanitize input on listinfo page (CVE-2018-0618)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.1" date="1636459200">- Fix for CVE-2016-6893
- Fix for CVE-2021-42097
- Resolves: #2024884, #2020688</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.2" date="1638100800">- Fix for CVE-2021-44227
- Resolves: #2026866</changelog>
</package>
<package pkgid="f11d55a98ddfc2bc624ab5f3c469cea14071bd1967f69a1433ab6e386cc8312c" name="mailman" arch="src">
  <version epoch="3" ver="2.1.15" rel="30.el7_9.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-25" date="1518782400">- Resolves: #1545973 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992000">- Resolves: #1545973 -  Add sanitizer for XSS mitigation</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-27" date="1521547200">- Related : #1545973 -  Bump release to override rhel-7.4.z version</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-28" date="1563796800">- Resolves: #1718180 - Try to decode member name first</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-29" date="1564574400">- Resolves: #1611689 -  Trim long text in "no such list" messages</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-30" date="1564574401">- Resolves: #1599692 - Sanitize input on listinfo page (CVE-2018-0618)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.1" date="1636459200">- Fix for CVE-2016-6893
- Fix for CVE-2021-42097
- Resolves: #2024884, #2020688</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.2" date="1638100800">- Fix for CVE-2021-44227
- Resolves: #2026866</changelog>
</package>
<package pkgid="2a23ebbd2b0786a921759d4203a33813b0f4fb4d0c4d5d9e47f1cd99e012c845" name="mailman" arch="x86_64">
  <version epoch="3" ver="2.1.15" rel="30.el7_9.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-25" date="1518782400">- Resolves: #1545973 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992000">- Resolves: #1545973 -  Add sanitizer for XSS mitigation</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-27" date="1521547200">- Related : #1545973 -  Bump release to override rhel-7.4.z version</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-28" date="1563796800">- Resolves: #1718180 - Try to decode member name first</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-29" date="1564574400">- Resolves: #1611689 -  Trim long text in "no such list" messages</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-30" date="1564574401">- Resolves: #1599692 - Sanitize input on listinfo page (CVE-2018-0618)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.1" date="1636459200">- Fix for CVE-2016-6893
- Fix for CVE-2021-42097
- Resolves: #2024884, #2020688</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.2" date="1638100800">- Fix for CVE-2021-44227
- Resolves: #2026866</changelog>
</package>
<package pkgid="897b2a7597272091eed0db1fe2420fccfc182d51d6d0a1f101975eeaf6c9adfd" name="mailman-debuginfo" arch="i686">
  <version epoch="3" ver="2.1.15" rel="30.el7_9.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-25" date="1518782400">- Resolves: #1545973 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992000">- Resolves: #1545973 -  Add sanitizer for XSS mitigation</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-27" date="1521547200">- Related : #1545973 -  Bump release to override rhel-7.4.z version</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-28" date="1563796800">- Resolves: #1718180 - Try to decode member name first</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-29" date="1564574400">- Resolves: #1611689 -  Trim long text in "no such list" messages</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-30" date="1564574401">- Resolves: #1599692 - Sanitize input on listinfo page (CVE-2018-0618)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.1" date="1636459200">- Fix for CVE-2016-6893
- Fix for CVE-2021-42097
- Resolves: #2024884, #2020688</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.2" date="1638100800">- Fix for CVE-2021-44227
- Resolves: #2026866</changelog>
</package>
<package pkgid="0a9a575d02af6effede996af149d5cc19b0b6718b233541a68a6c355e0a9f6d0" name="mailman-debuginfo" arch="x86_64">
  <version epoch="3" ver="2.1.15" rel="30.el7_9.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-25" date="1518782400">- Resolves: #1545973 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992000">- Resolves: #1545973 -  Add sanitizer for XSS mitigation</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-27" date="1521547200">- Related : #1545973 -  Bump release to override rhel-7.4.z version</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-28" date="1563796800">- Resolves: #1718180 - Try to decode member name first</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-29" date="1564574400">- Resolves: #1611689 -  Trim long text in "no such list" messages</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-30" date="1564574401">- Resolves: #1599692 - Sanitize input on listinfo page (CVE-2018-0618)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.1" date="1636459200">- Fix for CVE-2016-6893
- Fix for CVE-2021-42097
- Resolves: #2024884, #2020688</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.2" date="1638100800">- Fix for CVE-2021-44227
- Resolves: #2026866</changelog>
</package>
<package pkgid="c6cea3b573bc35f5e981c055ea1df18d57ec5abfa798c8874152e3cbff89af05" name="mdadm" arch="i686">
  <version epoch="0" ver="4.1" rel="7.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.0-13" date="1518004800">- stop previous reshape process first 
- Resolves rhbz#1507415</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
</package>
<package pkgid="780a691a808897670061fe1322e9f54673f1282e9af766603002b30dd1ba8a2c" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="7.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.0-13" date="1518004800">- stop previous reshape process first 
- Resolves rhbz#1507415</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
</package>
<package pkgid="c6579d00707b3aeed29f19f5024e63e1ca48328725847b1712d64873df780992" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="7.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.0-13" date="1518004800">- stop previous reshape process first 
- Resolves rhbz#1507415</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
</package>
<package pkgid="0d092de154cbd6c705813e140a74888e19ca5193e86991acd5b75d705d805bb6" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="7.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.0-13" date="1518004800">- stop previous reshape process first 
- Resolves rhbz#1507415</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
</package>
<package pkgid="e0a65b00391e45749e637d05e9bca5e5d84734ae88f0bd30b6b4f86bac6c8231" name="mdadm" arch="i686">
  <version epoch="0" ver="4.1" rel="8.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
</package>
<package pkgid="2f295dd0e28478c26906468f6fea9f0b3f10bdbe9ae2099a7f80ab51b6e6b307" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="8.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
</package>
<package pkgid="3d5c8c8f6feb7a5b0e3bcda16e44e06fa1eee9c8016ffe1f07901a0c494b5948" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="8.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
</package>
<package pkgid="8025d0c8fa6e2ad1c805ac6adae835e262dfcf7e0eb3c05f60003d75997e4d0d" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="8.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
</package>
<package pkgid="fd0b7acc89782bf720d2284905171610d165612eefa00333369d0e1551704be0" name="mdadm" arch="i686">
  <version epoch="0" ver="4.1" rel="9.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.9" date="1636372800">- imsm: After reboot put spare devices into right container.
- Resolves rhbz#2005306</changelog>
</package>
<package pkgid="b88a5e28ae5a9f555e164ac70ae138a22a98e3aebdefe1ee5176c7c5a47de20d" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="9.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.9" date="1636372800">- imsm: After reboot put spare devices into right container.
- Resolves rhbz#2005306</changelog>
</package>
<package pkgid="da28c79e3800c75359b30798dd2c28e4d044cd7932ad53a587d0448bc48a90b8" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="9.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.9" date="1636372800">- imsm: After reboot put spare devices into right container.
- Resolves rhbz#2005306</changelog>
</package>
<package pkgid="6c3b0d24634082a3614bd94bc959ef6e8dbe20c00bdd0dc93f62f0d1cb4ae181" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="9.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.9" date="1636372800">- imsm: After reboot put spare devices into right container.
- Resolves rhbz#2005306</changelog>
</package>
<package pkgid="7a9a2c7c250704b4b4b781f58809e3dec82f73f954159435a986a1348fd9680f" name="mdadm-debuginfo" arch="i686">
  <version epoch="0" ver="4.1" rel="7.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.0-13" date="1518004800">- stop previous reshape process first 
- Resolves rhbz#1507415</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
</package>
<package pkgid="e0591dc8cbef55da9b14cbabc6f77765b4075ab8fdfb7453ac432f5bb4bbe55b" name="mdadm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1" rel="7.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.0-13" date="1518004800">- stop previous reshape process first 
- Resolves rhbz#1507415</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
</package>
<package pkgid="7dd90a0ed607769e4c4206b821928b049cefd28aee49612ad98f6014f6e324ea" name="mdadm-debuginfo" arch="i686">
  <version epoch="0" ver="4.1" rel="8.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
</package>
<package pkgid="a0a4c7b79158f17dae5a6b0dfdea0e51e205073aa8e13dc061734cc070adc4cf" name="mdadm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1" rel="8.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
</package>
<package pkgid="95f58fa7cb8e6c9889a6b27c92006583bbb4a730851311eff6d0178cd01e19db" name="mdadm-debuginfo" arch="i686">
  <version epoch="0" ver="4.1" rel="9.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.9" date="1636372800">- imsm: After reboot put spare devices into right container.
- Resolves rhbz#2005306</changelog>
</package>
<package pkgid="8e20c24d6df59f710ef79b1b357d4299a0d17ddee86f5a66b0e2ec2f60481eb3" name="mdadm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1" rel="9.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.9" date="1636372800">- imsm: After reboot put spare devices into right container.
- Resolves rhbz#2005306</changelog>
</package>
<package pkgid="9405c677b162f9899c331ee3d447251f24f8b75282b3c3ea0baa9b81ce9d66bf" name="mesa" arch="src">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="f6cafb177221973eb28e537576657b8ec65e4727d608255ce6117eae49c5a655" name="mesa" arch="src">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="b761dd17a1ada47b7f28f9a8a408ed7715807d856cc039e2702170c666a84e49" name="mesa-debuginfo" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="df4397b1a06bc1c0e6177fe971cdc8d5c4e0f07d8678276a06dc49a1aa0dc4c2" name="mesa-debuginfo" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="8356be3c5b9aa05438c5750fb8e8fd83c5b457e7ac0a36e045de25295cf6cf53" name="mesa-dri-drivers" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="c7eed676dbaacb35fbc4b22c947733ce06623ba70d668aa0211af81a72b81b3f" name="mesa-dri-drivers" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="3c50a3b0b5f0b146cb5caa46d029dc36361e202460d45d012c59db006b06cb4d" name="mesa-filesystem" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="b22d3724f29000c80e74f3913c9bb6de44802de27908cecc36f5a26e76acc566" name="mesa-filesystem" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="70a88ef6d415c88bf5fd7921118a1471dce5913a6c127b5731ace1fb3801be7a" name="mesa-khr-devel" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="c6544a3895048c42074abbb00b563001098484d0099360ef954dc39d14f9fda1" name="mesa-khr-devel" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="a0152e4fea8975110f11f323755fa6ddad312482ab0a883fa3477bc20ce35b06" name="mesa-libEGL" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="8a1694e42e085a2604e48231615b134ff78e5433a375864800d77d98e0222e76" name="mesa-libEGL" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="5763838aa412d0681636a052c87d49dfaf1eb09e38185eb00df58baf65f3b1c5" name="mesa-libEGL-devel" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="9d641c6b4b4a1976bf7e12fd2bd5ee6bc1067c76cd1fd3ddff520555571074c3" name="mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="bd56570708510aa5f095be46573c88146e0c3f2c1a51bc059f61870207e05779" name="mesa-libGL" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="362c32bd1a3d1fb981dc71b5660f5fafe2564b3336fabee73a9f872f9ac12393" name="mesa-libGL" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="d20533a57294afa9c7797e3dd1303c43249cd68c2298126b849358a2b98f09fd" name="mesa-libGL-devel" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="184f632e27ce8f8abe64275dc2a79505432f48cf4c9758a8e02403079b5699a6" name="mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="f9983846301be87ccb1aba702009d32358a4e504de3da6bb252a3608be3dd662" name="mesa-libGLES" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="d6b92b1ef56a564bfacb119cd36183947a24d575d2c52489d37b9eb96c9a9cf5" name="mesa-libGLES" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="f945970529d5a33913f07af2d9394cfc157c523ff1e30edd586294748b97ece4" name="mesa-libGLES-devel" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="77a85940156b0f17f06a8c72c7c74174191ccaf2fff19269582128f8286cf478" name="mesa-libGLES-devel" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="8dca4c5386c4780a5926eceb584c038c39e00b34bcaabe0f515176d374fa4899" name="mesa-libOSMesa" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="ac01d3e744a19307fb91c64f79f3657dfc5e47a322bf5e877003f0d6e6fb6efe" name="mesa-libOSMesa" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="bfc1aeb33f90b30b043ffc3ab3394e6ef9f4e661dbace11730a07efa4fbd4dd7" name="mesa-libOSMesa-devel" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="5b8436ac174cf773919d577259e224b7739f48c75c41e59111605461135421e7" name="mesa-libOSMesa-devel" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="56a2bd1973d7b1b1e2f36e3204b21d7ec31b89cb7b12bb46423f5cef9fc01651" name="mesa-libgbm" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="5c32006eb1798b0eda3e0f36e983001f22b49fbfb43fb6db1391fa17d41d9a21" name="mesa-libgbm" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="954958b5b3d405ab403882f52d84fa0d36d678b47bc6c658b47809bb81f9bcd8" name="mesa-libgbm-devel" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="7be20d20bfacfa2cc28f3ab1051f910d793829a26d58b82c1f8b6ab549a833d0" name="mesa-libgbm-devel" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="50ace7225272a25a86a8e1319cd9e966466a3a0a73b4cc7e77550f6bc7cb4e8c" name="mesa-libglapi" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="e5610bef7a46700bd709196e69b4c87d83dc6565e657c2d883901efe6a5920ea" name="mesa-libglapi" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="748155ee4ca759b54c3c1770346c9aae012e738f87d77e551de6c76b98c07652" name="mesa-libxatracker" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="59ea21f89a3d6cfbb8cd14699b92d8196f7977159b57836e3156f9ee3a8c63d7" name="mesa-libxatracker" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="6d2cb801d2519f11b1f766c4a5c39d0130899ffdaec1ce01ba19ac0acf9c0c9e" name="mesa-libxatracker-devel" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="cfb7d44ffabbcda073353c49f9ca585df4e6910e56290fad3d51ad71f48615f6" name="mesa-libxatracker-devel" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="3d311768e3570897c88ae9d713e673bf0dee6954e494e8d4d81ce58e83b051ee" name="mesa-vdpau-drivers" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="f7764dc63b16bdac5314148d2e9bf75d74a641ab2daa2b6e661c31358acb50ba" name="mesa-vdpau-drivers" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="6a6d04763a0588f8c4878b89c30c6928575a4f2bc43713cc5fee7892a9055726" name="mesa-vulkan-drivers" arch="i686">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="00276dda88640e0f09d6fb38771015679ba5c6dd787cbae697a660fb078613c7" name="mesa-vulkan-drivers" arch="x86_64">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="7b5fe3a1161c3dae5b0a5d5a4a0fa9069605349f9991deae6ac9ab75775d6fd6" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="73.11.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059200">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="1386c8a3521c3f76831548bc502755bc8929ea4203c9927860d235c45a74fe8c" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.11.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059200">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="bd2dc8385fb9759e199556f762d7fc1ff0ea1e7079f3922d0674c0b1204c14eb" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.11.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059200">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="e70e4e192d6385f4cf7b678fe0bae7217406f63caeef27ae0d407cdc921059e1" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.11.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059200">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="aa497b51a196dca12fd9ee2fbf3f7c8f22b78542aa54675b9b46c38b8d2a598d" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="73.13.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268800">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="5f6e99af3488884135ceb61c3adc76e4319046df75f4f764f9b42efe6aab8f1b" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.13.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268800">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="68604e3825130cb8690ae451df52eb937dfefc39a266521a073a8f647ddb17f5" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.13.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268800">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="b959e62941ea895dc8c832376c5db678ccd56721cca10f5c5eb8b1459aba28c3" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.13.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268800">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="1e5b8f79257092eaad519dec3ac8eb6d070a8676bf5eea1ad4ca6c1f6b027d16" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="73.14.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
</package>
<package pkgid="9b2945fe5756034259cab105998837e156c17ab2e702ca4cfa48ba53090512cf" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.14.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
</package>
<package pkgid="62898ca779450e88317f363d55fc16a40a5c5086a7b4ec12c87329a05aa85b77" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.14.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
</package>
<package pkgid="0f5e1660d8053331b76323cd0d6368098a8e097e3e713a194bbbca17b5462bbd" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.14.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
</package>
<package pkgid="17a5ebc293a128ef2ac0cd3c44a82f3b1504d74020d3ae04337bdf921b75d7a9" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="73.15.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
</package>
<package pkgid="4894f6fc62f630990fe1e4c61fea75e53167ce589fa8a889a72847a8bbc138be" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.15.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
</package>
<package pkgid="9767b778b4ac50e154622101f900ece6e1aa404e1ce118bb55e40d65dadc2a78" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.15.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
</package>
<package pkgid="d562be4bf4f804aa2d34e6a88f732a5552d314bad2fa664ba35b0fbc403090bd" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.15.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
</package>
<package pkgid="492c7ff253408a71ffb3f977c0e4e5241ef0d960cf84622513832d94ef9fd1c6" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="73.16.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
</package>
<package pkgid="4f6007c575bd56a39cde90de32d25ade16d3d12c0f3fc0582f78099837976b31" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.16.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
</package>
<package pkgid="9d4cb05eb26b22fdb338377c1dac522fb359b4d59a8c301a7531b14c1483084c" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.16.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
</package>
<package pkgid="226142d268f056625926060a2183d2f1c169b57dab0defa4b5e79bef9a35dff0" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.16.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
</package>
<package pkgid="f0d2351e193862158f5e10859eae598ccf9bc00f68bbcc8ef3dce1ae7dc8a478" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="73.2.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-66" date="1589457600">- Update Intel CPU microcode to microcode-20200508 release (#1835549):
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
    up to 0x78.
- Change the URL in the intel-microcode2ucode.8 to point to the GitHub
  repository since the microcode download section at Intel Download Center
  does not exist anymore.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-67" date="1590148800">- Update Intel CPU microcode to microcode-20200520 release (#1783103):
  - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
    up to 0x621;
  - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
    up to 0x71a.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
</package>
<package pkgid="33b2bdce87f9e55bd8f13407df6c7f3c26cdab101672344286b234d1fa3b33a5" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.2.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-66" date="1589457600">- Update Intel CPU microcode to microcode-20200508 release (#1835549):
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
    up to 0x78.
- Change the URL in the intel-microcode2ucode.8 to point to the GitHub
  repository since the microcode download section at Intel Download Center
  does not exist anymore.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-67" date="1590148800">- Update Intel CPU microcode to microcode-20200520 release (#1783103):
  - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
    up to 0x621;
  - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
    up to 0x71a.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
</package>
<package pkgid="27199a5009167e0c9054e929bf5b8600b0abcf18c1e3b44b0c8255703118a49f" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.2.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-66" date="1589457600">- Update Intel CPU microcode to microcode-20200508 release (#1835549):
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
    up to 0x78.
- Change the URL in the intel-microcode2ucode.8 to point to the GitHub
  repository since the microcode download section at Intel Download Center
  does not exist anymore.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-67" date="1590148800">- Update Intel CPU microcode to microcode-20200520 release (#1783103):
  - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
    up to 0x621;
  - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
    up to 0x71a.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
</package>
<package pkgid="4df5e2c418de01f02a4f6177a8f90d160fd30a9bb7da0355402c9f170c575384" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.2.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-66" date="1589457600">- Update Intel CPU microcode to microcode-20200508 release (#1835549):
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
    up to 0x78.
- Change the URL in the intel-microcode2ucode.8 to point to the GitHub
  repository since the microcode download section at Intel Download Center
  does not exist anymore.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-67" date="1590148800">- Update Intel CPU microcode to microcode-20200520 release (#1783103):
  - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
    up to 0x621;
  - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
    up to 0x71a.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
</package>
<package pkgid="ef2e38c02eb9c577646db9cdb0820257d24a8a57a155040b14d55d04fd8c9485" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="73.20.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041600">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.17" date="1690891200">- Force locale to C in check_caveats, reload_microcode, and update_ucode.
- Cleanup the dangling symlinks in update_ucode.
- Avoid spurious find failures due to calls on directories that may not exist.
- Add support for the new, more correct, variant of dracut's default
  $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.18" date="1691409600">- Update Intel CPU microcode to microcode-20230516 release:
  - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
  - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
    to 0x2006f05;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
    up to 0x1000171;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
    up to 0x4003501;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003303 up to 0x5003501;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
    up to 0x7002601;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
    up to 0xd000390;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
    up to 0x1000230;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
    up to 0xba;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
    to 0x33;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
    to 0x44;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf0 up
    to 0xf2;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf4 up to 0xf6;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
    up to 0x42a;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf4 up to 0xf8;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
    to 0xf6;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf4 up to 0xf6;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
    to 0x58;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
    to 0x113;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
    up to 0x4112.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.19" date="1691668800">- Update Intel CPU microcode to microcode-20230808 release, addresses
  CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2223994):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
    to 0x2007006;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
    up to 0x1000181;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
    up to 0x4003604;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003501 up to 0x5003604;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
    up to 0x7002703;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
    up to 0xd0003a5;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
    up to 0xbc;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
    to 0x2c;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up
    to 0xf4;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf6 up to 0xf8;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
    up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
    up to 0x42c;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf8 up to 0xfa;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
    to 0xf8;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf6 up to 0xf8;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
    to 0x59;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
    to 0x119;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
    up to 0x4119 (old pf 0xc0);
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
    to 0x11 (old pf 0x1).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.20" date="1698840000">- Update Intel CPU microcode to microcode-20231009 release, addresses
  CVE-2023-23583 (RHEL-3920):
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
    up to 0xd0003b9;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
    up to 0x1000268;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
    up to 0xc2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
    to 0x34;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
    to 0x4e;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
    up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
    up to 0x430;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
    to 0x5;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
    to 0x5d;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
    to 0x11d;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
    up to 0x411c;
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
    to 0x12;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32.</changelog>
</package>
<package pkgid="314d1e00e64b4b670530d3c42e8b4b3e8cbfe63d67a2499df7be4db75c7e255d" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.20.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041600">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.17" date="1690891200">- Force locale to C in check_caveats, reload_microcode, and update_ucode.
- Cleanup the dangling symlinks in update_ucode.
- Avoid spurious find failures due to calls on directories that may not exist.
- Add support for the new, more correct, variant of dracut's default
  $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.18" date="1691409600">- Update Intel CPU microcode to microcode-20230516 release:
  - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
  - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
    to 0x2006f05;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
    up to 0x1000171;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
    up to 0x4003501;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003303 up to 0x5003501;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
    up to 0x7002601;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
    up to 0xd000390;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
    up to 0x1000230;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
    up to 0xba;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
    to 0x33;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
    to 0x44;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf0 up
    to 0xf2;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf4 up to 0xf6;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
    up to 0x42a;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf4 up to 0xf8;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
    to 0xf6;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf4 up to 0xf6;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
    to 0x58;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
    to 0x113;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
    up to 0x4112.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.19" date="1691668800">- Update Intel CPU microcode to microcode-20230808 release, addresses
  CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2223994):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
    to 0x2007006;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
    up to 0x1000181;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
    up to 0x4003604;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003501 up to 0x5003604;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
    up to 0x7002703;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
    up to 0xd0003a5;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
    up to 0xbc;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
    to 0x2c;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up
    to 0xf4;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf6 up to 0xf8;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
    up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
    up to 0x42c;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf8 up to 0xfa;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
    to 0xf8;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf6 up to 0xf8;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
    to 0x59;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
    to 0x119;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
    up to 0x4119 (old pf 0xc0);
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
    to 0x11 (old pf 0x1).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.20" date="1698840000">- Update Intel CPU microcode to microcode-20231009 release, addresses
  CVE-2023-23583 (RHEL-3920):
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
    up to 0xd0003b9;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
    up to 0x1000268;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
    up to 0xc2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
    to 0x34;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
    to 0x4e;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
    up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
    up to 0x430;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
    to 0x5;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
    to 0x5d;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
    to 0x11d;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
    up to 0x411c;
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
    to 0x12;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32.</changelog>
</package>
<package pkgid="ee3743e2ffeb2a2005ad97e7bb86b322d77a7ce9a35e4e1af2a47e94efa52dd9" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.20.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041600">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.17" date="1690891200">- Force locale to C in check_caveats, reload_microcode, and update_ucode.
- Cleanup the dangling symlinks in update_ucode.
- Avoid spurious find failures due to calls on directories that may not exist.
- Add support for the new, more correct, variant of dracut's default
  $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.18" date="1691409600">- Update Intel CPU microcode to microcode-20230516 release:
  - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
  - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
    to 0x2006f05;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
    up to 0x1000171;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
    up to 0x4003501;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003303 up to 0x5003501;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
    up to 0x7002601;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
    up to 0xd000390;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
    up to 0x1000230;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
    up to 0xba;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
    to 0x33;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
    to 0x44;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf0 up
    to 0xf2;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf4 up to 0xf6;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
    up to 0x42a;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf4 up to 0xf8;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
    to 0xf6;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf4 up to 0xf6;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
    to 0x58;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
    to 0x113;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
    up to 0x4112.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.19" date="1691668800">- Update Intel CPU microcode to microcode-20230808 release, addresses
  CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2223994):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
    to 0x2007006;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
    up to 0x1000181;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
    up to 0x4003604;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003501 up to 0x5003604;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
    up to 0x7002703;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
    up to 0xd0003a5;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
    up to 0xbc;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
    to 0x2c;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up
    to 0xf4;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf6 up to 0xf8;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
    up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
    up to 0x42c;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf8 up to 0xfa;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
    to 0xf8;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf6 up to 0xf8;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
    to 0x59;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
    to 0x119;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
    up to 0x4119 (old pf 0xc0);
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
    to 0x11 (old pf 0x1).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.20" date="1698840000">- Update Intel CPU microcode to microcode-20231009 release, addresses
  CVE-2023-23583 (RHEL-3920):
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
    up to 0xd0003b9;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
    up to 0x1000268;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
    up to 0xc2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
    to 0x34;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
    to 0x4e;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
    up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
    up to 0x430;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
    to 0x5;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
    to 0x5d;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
    to 0x11d;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
    up to 0x411c;
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
    to 0x12;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32.</changelog>
</package>
<package pkgid="dc48d1391a2ac31c28e0f1300e756fb7a6b22491c84a82e3166e250fb510f55f" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.20.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041600">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.17" date="1690891200">- Force locale to C in check_caveats, reload_microcode, and update_ucode.
- Cleanup the dangling symlinks in update_ucode.
- Avoid spurious find failures due to calls on directories that may not exist.
- Add support for the new, more correct, variant of dracut's default
  $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.18" date="1691409600">- Update Intel CPU microcode to microcode-20230516 release:
  - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
  - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
    to 0x2006f05;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
    up to 0x1000171;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
    up to 0x4003501;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003303 up to 0x5003501;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
    up to 0x7002601;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
    up to 0xd000390;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
    up to 0x1000230;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
    up to 0xba;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
    to 0x33;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
    to 0x44;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf0 up
    to 0xf2;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf4 up to 0xf6;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
    up to 0x42a;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf4 up to 0xf8;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
    to 0xf6;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf4 up to 0xf6;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
    to 0x58;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
    to 0x113;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
    up to 0x4112.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.19" date="1691668800">- Update Intel CPU microcode to microcode-20230808 release, addresses
  CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2223994):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
    to 0x2007006;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
    up to 0x1000181;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
    up to 0x4003604;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003501 up to 0x5003604;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
    up to 0x7002703;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
    up to 0xd0003a5;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
    up to 0xbc;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
    to 0x2c;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up
    to 0xf4;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf6 up to 0xf8;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
    up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
    up to 0x42c;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf8 up to 0xfa;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
    to 0xf8;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf6 up to 0xf8;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
    to 0x59;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
    to 0x119;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
    up to 0x4119 (old pf 0xc0);
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
    to 0x11 (old pf 0x1).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.20" date="1698840000">- Update Intel CPU microcode to microcode-20231009 release, addresses
  CVE-2023-23583 (RHEL-3920):
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
    up to 0xd0003b9;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
    up to 0x1000268;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
    up to 0xc2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
    to 0x34;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
    to 0x4e;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
    up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
    up to 0x430;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
    to 0x5;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
    to 0x5d;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
    to 0x11d;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
    up to 0x411c;
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
    to 0x12;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32.</changelog>
</package>
<package pkgid="3aef08e1555297baff224f8cb57bbbdf8651ef08712a82ba543104b6473d146a" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="73.4.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
</package>
<package pkgid="3b64ae180eca6d86c8b3910ded2a7309468ca990e4848b5de5a8615a08bbb859" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.4.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
</package>
<package pkgid="f7b7e582946dad5f532c770d96a6c1174812e44c68efe7f64e997daf0e2034c1" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.4.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
</package>
<package pkgid="1ba90fdfa1debbd1e1bc9cf1baeb3cb539d254ad8afd8381792bd2f24316a117" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.4.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
</package>
<package pkgid="177c65c075bf38281b2501fc792218701b3f982e3f24b04ddabf50f07bb758a0" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="73.8.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222400">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222401">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
</package>
<package pkgid="4b7f00fc3781772b6379a244f0cfe74f1a4c492c704df442368d938056a5a41c" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.8.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222400">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222401">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
</package>
<package pkgid="941369dba6170b5f422279aacb19fa0110deb3eadd7a1550edcb9b48aafdf03f" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.8.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222400">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222401">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
</package>
<package pkgid="f9cc2756818312a20932ccd9345eaae8f25e81168ce178b4796148085b307143" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.8.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222400">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222401">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
</package>
<package pkgid="ba9ef3d110001a57b3403af070cd4acb2fcb81724e67093b0166116dbd755faf" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="73.9.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222400">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
</package>
<package pkgid="bcef9cf464e7520098eaa36068d8859760df3c2a57827af5d4966d89de886608" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.9.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222400">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
</package>
<package pkgid="b1d223d0cb6945f5d3e74752eb3e57ad21981aefbb64819e5d464ba61cd5c41b" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.9.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222400">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
</package>
<package pkgid="fc3ce99bd3064119d3d99c8b201b412ed376ff71cc2a65141507f065b838cfc8" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.9.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222400">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
</package>
<package pkgid="7b9a28e3f0e6fa30f842b658ed06ea195c82058f1b65412413cb6c2a8ca4894c" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="73.11.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059200">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="ee395252575b30aa4db74fc9c88ec91895d1bbd97fcf31e556d0210b52f59b34" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.11.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059200">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="7c732db0760ff00688914e2a1fae325b35d5bb09dddebc53b21a01aa505101a5" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="73.13.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268800">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="ffe05ef58914e4696465ad453411f12eb444d13e58901f4f11bfa9c120b2bb67" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.13.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268800">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="3cfe7f47e74a7acafc6819a4ba66e39da02fee846d1312ec053ea97533f3d14e" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="73.14.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
</package>
<package pkgid="18d0256c4a9e61d42075b839a85f735d85aa92949ec306c04c5b75b1a850c1f4" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.14.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
</package>
<package pkgid="e00d80bcdbbf358e25cf89a25045ade539b8dae4f0256b2b9517cb5864a5655e" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="73.15.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
</package>
<package pkgid="d60a91167132df63599fd083c74d22576f2c005b2031d41d7a98a8ea2956513c" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.15.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
</package>
<package pkgid="3232a0a0ea7b53484c18ea93229c86cfb19205a1df4aa9c3d1d03f99bedb17be" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="73.16.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
</package>
<package pkgid="16656c0b84648133f60fd4e736ba97b535eca7ba0a25912150e41d36ce957465" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.16.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
</package>
<package pkgid="d41b2797ee7f7d61edd7f25ad8b92af48016e38043721ddadf91e05be231d8da" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="73.2.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-66" date="1589457600">- Update Intel CPU microcode to microcode-20200508 release (#1835549):
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
    up to 0x78.
- Change the URL in the intel-microcode2ucode.8 to point to the GitHub
  repository since the microcode download section at Intel Download Center
  does not exist anymore.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-67" date="1590148800">- Update Intel CPU microcode to microcode-20200520 release (#1783103):
  - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
    up to 0x621;
  - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
    up to 0x71a.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
</package>
<package pkgid="662eaf55983e228a64bb2d1e68b6de1d262e940b387b6c32861e14e5c3a02e09" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.2.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-66" date="1589457600">- Update Intel CPU microcode to microcode-20200508 release (#1835549):
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
    up to 0x78.
- Change the URL in the intel-microcode2ucode.8 to point to the GitHub
  repository since the microcode download section at Intel Download Center
  does not exist anymore.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-67" date="1590148800">- Update Intel CPU microcode to microcode-20200520 release (#1783103):
  - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
    up to 0x621;
  - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
    up to 0x71a.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
</package>
<package pkgid="7f1459a0fbddab4b0b4e6b257c327ab0b9eeb72fff6ec9a5c65d54f89c327653" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="73.20.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041600">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.17" date="1690891200">- Force locale to C in check_caveats, reload_microcode, and update_ucode.
- Cleanup the dangling symlinks in update_ucode.
- Avoid spurious find failures due to calls on directories that may not exist.
- Add support for the new, more correct, variant of dracut's default
  $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.18" date="1691409600">- Update Intel CPU microcode to microcode-20230516 release:
  - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
  - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
    to 0x2006f05;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
    up to 0x1000171;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
    up to 0x4003501;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003303 up to 0x5003501;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
    up to 0x7002601;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
    up to 0xd000390;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
    up to 0x1000230;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
    up to 0xba;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
    to 0x33;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
    to 0x44;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf0 up
    to 0xf2;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf4 up to 0xf6;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
    up to 0x42a;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf4 up to 0xf8;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
    to 0xf6;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf4 up to 0xf6;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
    to 0x58;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
    to 0x113;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
    up to 0x4112.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.19" date="1691668800">- Update Intel CPU microcode to microcode-20230808 release, addresses
  CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2223994):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
    to 0x2007006;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
    up to 0x1000181;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
    up to 0x4003604;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003501 up to 0x5003604;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
    up to 0x7002703;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
    up to 0xd0003a5;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
    up to 0xbc;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
    to 0x2c;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up
    to 0xf4;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf6 up to 0xf8;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
    up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
    up to 0x42c;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf8 up to 0xfa;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
    to 0xf8;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf6 up to 0xf8;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
    to 0x59;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
    to 0x119;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
    up to 0x4119 (old pf 0xc0);
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
    to 0x11 (old pf 0x1).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.20" date="1698840000">- Update Intel CPU microcode to microcode-20231009 release, addresses
  CVE-2023-23583 (RHEL-3920):
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
    up to 0xd0003b9;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
    up to 0x1000268;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
    up to 0xc2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
    to 0x34;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
    to 0x4e;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
    up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
    up to 0x430;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
    to 0x5;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
    to 0x5d;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
    to 0x11d;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
    up to 0x411c;
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
    to 0x12;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32.</changelog>
</package>
<package pkgid="d99b1963d9c3a144ac0fa07d7214d7a828b9a656b4a086eb5fb07172e3904ecc" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.20.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041600">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.17" date="1690891200">- Force locale to C in check_caveats, reload_microcode, and update_ucode.
- Cleanup the dangling symlinks in update_ucode.
- Avoid spurious find failures due to calls on directories that may not exist.
- Add support for the new, more correct, variant of dracut's default
  $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.18" date="1691409600">- Update Intel CPU microcode to microcode-20230516 release:
  - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
  - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
    to 0x2006f05;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
    up to 0x1000171;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
    up to 0x4003501;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003303 up to 0x5003501;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
    up to 0x7002601;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
    up to 0xd000390;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
    up to 0x1000230;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
    up to 0xba;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
    to 0x33;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
    to 0x44;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf0 up
    to 0xf2;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf4 up to 0xf6;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
    up to 0x42a;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf4 up to 0xf8;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
    to 0xf6;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf4 up to 0xf6;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
    to 0x58;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
    to 0x113;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
    up to 0x4112.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.19" date="1691668800">- Update Intel CPU microcode to microcode-20230808 release, addresses
  CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2223994):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
    to 0x2007006;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
    up to 0x1000181;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
    up to 0x4003604;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003501 up to 0x5003604;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
    up to 0x7002703;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
    up to 0xd0003a5;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
    up to 0xbc;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
    to 0x2c;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up
    to 0xf4;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf6 up to 0xf8;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
    up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
    up to 0x42c;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf8 up to 0xfa;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
    to 0xf8;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf6 up to 0xf8;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
    to 0x59;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
    to 0x119;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
    up to 0x4119 (old pf 0xc0);
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
    to 0x11 (old pf 0x1).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.20" date="1698840000">- Update Intel CPU microcode to microcode-20231009 release, addresses
  CVE-2023-23583 (RHEL-3920):
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
    up to 0xd0003b9;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
    up to 0x1000268;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
    up to 0xc2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
    to 0x34;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
    to 0x4e;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
    up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
    up to 0x430;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
    to 0x5;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
    to 0x5d;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
    to 0x11d;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
    up to 0x411c;
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
    to 0x12;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32.</changelog>
</package>
<package pkgid="28c25564f66eb1a512349d514990fbd1daabb50e64057b98305a8e08eb2b675d" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="73.4.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
</package>
<package pkgid="3015cf0c48ad7b8c9ac099b4ad2bf4c842d18447c9d7d67daa288fd8cca3f42a" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.4.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
</package>
<package pkgid="53e55ba584bcdc0034a04c4d63f502fc3e207eabaf1780b8a34ed6a79a92cc17" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="73.8.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222400">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222401">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
</package>
<package pkgid="3b5c609ec6d715d969928e3f0683fb00082f67a4efbc7cb15352508224334ad4" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.8.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222400">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222401">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
</package>
<package pkgid="c61aefc8f6375ce257cff5f1afd50616282f2caaa60823248c1968bbd062c362" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="73.9.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222400">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
</package>
<package pkgid="8457bb843b00be956c3ee86a55b0f855ffbf772aede200333a993437ba01a613" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="73.9.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222400">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
</package>
<package pkgid="843523db09b96c8704fe086ff32dad7154fdb8a33d1f320ca3835396295c303e" name="minizip" arch="i686">
  <version epoch="0" ver="1.2.7" rel="19.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.7-10" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
</package>
<package pkgid="57912b5df949cd6645f4a385b2f4ea6df53f5be03e937b4f0ac7d6932d78d8fe" name="minizip" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="19.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.7-10" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
</package>
<package pkgid="32dd15c3e21de6969bc53aafbff4df38178c892843ae23ee8f602d41577cd151" name="minizip" arch="i686">
  <version epoch="0" ver="1.2.7" rel="20.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.7-20" date="1649764800">- Resolves: CVE-2018-25032</changelog>
</package>
<package pkgid="5b71c85ac8f032a816179c33b7684238d239f3bfee206c3c128339a6d7fe2c84" name="minizip" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="20.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.7-20" date="1649764800">- Resolves: CVE-2018-25032</changelog>
</package>
<package pkgid="0949bea48d7baf347435ef72d75caeb575fe30561d19a76e72c6b00206995c4c" name="minizip" arch="i686">
  <version epoch="0" ver="1.2.7" rel="21.el7_9"/>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.7-20" date="1649764800">- Resolves: CVE-2018-25032</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.7-21" date="1675080000">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
</package>
<package pkgid="0147c9fabc919131564a37ba76e9c36150ce7d2c892eca1de0ab82f20c9d0991" name="minizip" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="21.el7_9"/>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.7-20" date="1649764800">- Resolves: CVE-2018-25032</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.7-21" date="1675080000">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
</package>
<package pkgid="5968822121da8c89765020b782ad9fcb656c472aab440122bd0b169283ddca0f" name="minizip-devel" arch="i686">
  <version epoch="0" ver="1.2.7" rel="19.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.7-10" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
</package>
<package pkgid="6f941a880e308ee2564649b793a62f99e18dddae122478bb793419c4cf563fcf" name="minizip-devel" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="19.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.7-10" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
</package>
<package pkgid="c0c1fd51f04fb095d532a52015c08255a2a0c3aa1fc3c4d062e186afd1d29eb4" name="minizip-devel" arch="i686">
  <version epoch="0" ver="1.2.7" rel="20.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.7-20" date="1649764800">- Resolves: CVE-2018-25032</changelog>
</package>
<package pkgid="c030a6e7cc33211bed4a9263302c488966594446949d96c69c1de90fa4aa7625" name="minizip-devel" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="20.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.7-20" date="1649764800">- Resolves: CVE-2018-25032</changelog>
</package>
<package pkgid="f88e752700bd7b972e819175bfdce1652dba37ca103ed6b6ac7a6e4a805cf5cf" name="minizip-devel" arch="i686">
  <version epoch="0" ver="1.2.7" rel="21.el7_9"/>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.7-20" date="1649764800">- Resolves: CVE-2018-25032</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.7-21" date="1675080000">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
</package>
<package pkgid="04192492510cb2eeb552ae80b204f0e11111f7edbabc3cd91f3c6f1c4c411010" name="minizip-devel" arch="x86_64">
  <version epoch="0" ver="1.2.7" rel="21.el7_9"/>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.7-20" date="1649764800">- Resolves: CVE-2018-25032</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.7-21" date="1675080000">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
</package>
<package pkgid="fb320660f757b63eac4613a55547394c0c23f6a80871b39fe57095e2a054519f" name="mod_auth_mellon" arch="i686">
  <version epoch="0" ver="0.14.0" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-3" date="1551787200">- Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-4" date="1553256000">- Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                           secured resources without ECP authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-5" date="1554206400">- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-6" date="1554206401">- Apply the patch from the previous commit
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-7" date="1565092800">- Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                           X-Requested-With</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-8" date="1570622400">- Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                           the login?ReturnTo= substring which could facilitate
                           information theft [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-9" date="1581249600">- Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                           support latest browsers</changelog>
</package>
<package pkgid="8084b500fc230ebbb64576a7cd62fdf1a070551fbabbceca5876fa5c9b52ba85" name="mod_auth_mellon" arch="src">
  <version epoch="0" ver="0.14.0" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-3" date="1551787200">- Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-4" date="1553256000">- Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                           secured resources without ECP authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-5" date="1554206400">- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-6" date="1554206401">- Apply the patch from the previous commit
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-7" date="1565092800">- Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                           X-Requested-With</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-8" date="1570622400">- Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                           the login?ReturnTo= substring which could facilitate
                           information theft [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-9" date="1581249600">- Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                           support latest browsers</changelog>
</package>
<package pkgid="a2de6a8b86856164d4d027e216623f30f47bc3ab4871e77ee12693ae54491ba3" name="mod_auth_mellon" arch="src">
  <version epoch="0" ver="0.14.0" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-3" date="1551787200">- Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-4" date="1553256000">- Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                           secured resources without ECP authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-5" date="1554206400">- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-6" date="1554206401">- Apply the patch from the previous commit
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-7" date="1565092800">- Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                           X-Requested-With</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-8" date="1570622400">- Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                           the login?ReturnTo= substring which could facilitate
                           information theft [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-9" date="1581249600">- Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                           support latest browsers</changelog>
</package>
<package pkgid="ab8daf7edb624826bd786b64005e9ec26fef268a22a054b0b8940a367e30d46a" name="mod_auth_mellon" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-3" date="1551787200">- Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-4" date="1553256000">- Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                           secured resources without ECP authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-5" date="1554206400">- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-6" date="1554206401">- Apply the patch from the previous commit
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-7" date="1565092800">- Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                           X-Requested-With</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-8" date="1570622400">- Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                           the login?ReturnTo= substring which could facilitate
                           information theft [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-9" date="1581249600">- Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                           support latest browsers</changelog>
</package>
<package pkgid="e5ce1d7fca577d400c3522dee28a4771f17e5d609873cc240857aa0af402e9e4" name="mod_auth_mellon-debuginfo" arch="i686">
  <version epoch="0" ver="0.14.0" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-3" date="1551787200">- Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-4" date="1553256000">- Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                           secured resources without ECP authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-5" date="1554206400">- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-6" date="1554206401">- Apply the patch from the previous commit
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-7" date="1565092800">- Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                           X-Requested-With</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-8" date="1570622400">- Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                           the login?ReturnTo= substring which could facilitate
                           information theft [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-9" date="1581249600">- Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                           support latest browsers</changelog>
</package>
<package pkgid="03f783b1a22e54290f65af66266da9c2db542ba02433c83c7a4df667af4387c8" name="mod_auth_mellon-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-3" date="1551787200">- Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-4" date="1553256000">- Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                           secured resources without ECP authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-5" date="1554206400">- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-6" date="1554206401">- Apply the patch from the previous commit
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-7" date="1565092800">- Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                           X-Requested-With</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-8" date="1570622400">- Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                           the login?ReturnTo= substring which could facilitate
                           information theft [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-9" date="1581249600">- Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                           support latest browsers</changelog>
</package>
<package pkgid="b37e3751ae56eb08ce2267036bda60056f256f4387d512d2c1f53c7ff7e37315" name="mod_auth_mellon-diagnostics" arch="i686">
  <version epoch="0" ver="0.14.0" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-3" date="1551787200">- Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-4" date="1553256000">- Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                           secured resources without ECP authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-5" date="1554206400">- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-6" date="1554206401">- Apply the patch from the previous commit
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-7" date="1565092800">- Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                           X-Requested-With</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-8" date="1570622400">- Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                           the login?ReturnTo= substring which could facilitate
                           information theft [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-9" date="1581249600">- Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                           support latest browsers</changelog>
</package>
<package pkgid="ee1b70ecdcf387d31e406c3edab36f84335f13a9164fd4448127220228cdd5bd" name="mod_auth_mellon-diagnostics" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-3" date="1551787200">- Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-4" date="1553256000">- Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                           secured resources without ECP authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-5" date="1554206400">- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-6" date="1554206401">- Apply the patch from the previous commit
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-7" date="1565092800">- Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                           X-Requested-With</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-8" date="1570622400">- Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                           the login?ReturnTo= substring which could facilitate
                           information theft [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-9" date="1581249600">- Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                           support latest browsers</changelog>
</package>
<package pkgid="66207a4aacb440aac597ba9b32ed89d86979978029742aa5771591aa2e5a6f11" name="mod_auth_openidc" arch="i686">
  <version epoch="0" ver="1.8.8" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-1" date="1459252800">- Initial import
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-2" date="1459252801">- Add %check to run test
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-3" date="1459425600">- fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
  failing to null terminate decrypted string
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-4" date="1548763200">- Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                           user-supplied content on error pages [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-5" date="1548763201">- Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                           OIDCAuthNHeader not skipped in an "AuthType oauth20"
                           configuration [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-6" date="1584360000">- Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                           issue exists in URLs with slash and backslash [rhel-7]
- Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
                           in logout url when using URLs with leading slashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-7" date="1584360001">- Fix a regression in the previous patches
- Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                          issue exists in URLs with slash and backslash [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-8" date="1598443200">- Resolves: rhbz#1823762 - Backport SameSite=None cookie from
                           mod_auth_openidc upstream to support
                           latest browsers [rhel-7.9.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-9" date="1602158400">- Rebuild to pick up the proper build tag
- Related: rhbz#1823762 - Backport SameSite=None cookie from
                          mod_auth_openidc upstream to support
                          latest browsers [rhel-7.9.z]</changelog>
</package>
<package pkgid="8af1296e433d60f4fe06afcee1e2b98a3053d04f74473c3a11cc519f53d66f60" name="mod_auth_openidc" arch="src">
  <version epoch="0" ver="1.8.8" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-1" date="1459252800">- Initial import
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-2" date="1459252801">- Add %check to run test
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-3" date="1459425600">- fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
  failing to null terminate decrypted string
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-4" date="1548763200">- Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                           user-supplied content on error pages [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-5" date="1548763201">- Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                           OIDCAuthNHeader not skipped in an "AuthType oauth20"
                           configuration [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-6" date="1584360000">- Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                           issue exists in URLs with slash and backslash [rhel-7]
- Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
                           in logout url when using URLs with leading slashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-7" date="1584360001">- Fix a regression in the previous patches
- Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                          issue exists in URLs with slash and backslash [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-8" date="1598443200">- Resolves: rhbz#1823762 - Backport SameSite=None cookie from
                           mod_auth_openidc upstream to support
                           latest browsers [rhel-7.9.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-9" date="1602158400">- Rebuild to pick up the proper build tag
- Related: rhbz#1823762 - Backport SameSite=None cookie from
                          mod_auth_openidc upstream to support
                          latest browsers [rhel-7.9.z]</changelog>
</package>
<package pkgid="b755b9fb28fdd773b5152b0d8664afcec55ccb22106e563dcad129af9fbfaad0" name="mod_auth_openidc" arch="src">
  <version epoch="0" ver="1.8.8" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-1" date="1459252800">- Initial import
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-2" date="1459252801">- Add %check to run test
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-3" date="1459425600">- fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
  failing to null terminate decrypted string
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-4" date="1548763200">- Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                           user-supplied content on error pages [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-5" date="1548763201">- Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                           OIDCAuthNHeader not skipped in an "AuthType oauth20"
                           configuration [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-6" date="1584360000">- Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                           issue exists in URLs with slash and backslash [rhel-7]
- Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
                           in logout url when using URLs with leading slashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-7" date="1584360001">- Fix a regression in the previous patches
- Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                          issue exists in URLs with slash and backslash [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-8" date="1598443200">- Resolves: rhbz#1823762 - Backport SameSite=None cookie from
                           mod_auth_openidc upstream to support
                           latest browsers [rhel-7.9.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-9" date="1602158400">- Rebuild to pick up the proper build tag
- Related: rhbz#1823762 - Backport SameSite=None cookie from
                          mod_auth_openidc upstream to support
                          latest browsers [rhel-7.9.z]</changelog>
</package>
<package pkgid="a78c9b39dc8869c4eb10f150a188a26e9a1c86c758014fab4d25f9528a5bb133" name="mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="1.8.8" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-1" date="1459252800">- Initial import
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-2" date="1459252801">- Add %check to run test
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-3" date="1459425600">- fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
  failing to null terminate decrypted string
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-4" date="1548763200">- Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                           user-supplied content on error pages [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-5" date="1548763201">- Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                           OIDCAuthNHeader not skipped in an "AuthType oauth20"
                           configuration [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-6" date="1584360000">- Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                           issue exists in URLs with slash and backslash [rhel-7]
- Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
                           in logout url when using URLs with leading slashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-7" date="1584360001">- Fix a regression in the previous patches
- Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                          issue exists in URLs with slash and backslash [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-8" date="1598443200">- Resolves: rhbz#1823762 - Backport SameSite=None cookie from
                           mod_auth_openidc upstream to support
                           latest browsers [rhel-7.9.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-9" date="1602158400">- Rebuild to pick up the proper build tag
- Related: rhbz#1823762 - Backport SameSite=None cookie from
                          mod_auth_openidc upstream to support
                          latest browsers [rhel-7.9.z]</changelog>
</package>
<package pkgid="960b75e5f8d1722b9bfe8d256891812953172226a9a5d26df566adf3854f090a" name="mod_auth_openidc-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.8" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-1" date="1459252800">- Initial import
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-2" date="1459252801">- Add %check to run test
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-3" date="1459425600">- fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
  failing to null terminate decrypted string
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-4" date="1548763200">- Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                           user-supplied content on error pages [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-5" date="1548763201">- Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                           OIDCAuthNHeader not skipped in an "AuthType oauth20"
                           configuration [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-6" date="1584360000">- Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                           issue exists in URLs with slash and backslash [rhel-7]
- Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
                           in logout url when using URLs with leading slashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-7" date="1584360001">- Fix a regression in the previous patches
- Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                          issue exists in URLs with slash and backslash [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-8" date="1598443200">- Resolves: rhbz#1823762 - Backport SameSite=None cookie from
                           mod_auth_openidc upstream to support
                           latest browsers [rhel-7.9.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-9" date="1602158400">- Rebuild to pick up the proper build tag
- Related: rhbz#1823762 - Backport SameSite=None cookie from
                          mod_auth_openidc upstream to support
                          latest browsers [rhel-7.9.z]</changelog>
</package>
<package pkgid="1ba37d81d0411fca20fda3a0dfd5976ca9184597bc480ce42a09738a689f5eff" name="mod_auth_openidc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.8" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-1" date="1459252800">- Initial import
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-2" date="1459252801">- Add %check to run test
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-3" date="1459425600">- fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
  failing to null terminate decrypted string
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-4" date="1548763200">- Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                           user-supplied content on error pages [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-5" date="1548763201">- Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                           OIDCAuthNHeader not skipped in an "AuthType oauth20"
                           configuration [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-6" date="1584360000">- Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                           issue exists in URLs with slash and backslash [rhel-7]
- Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
                           in logout url when using URLs with leading slashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-7" date="1584360001">- Fix a regression in the previous patches
- Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                          issue exists in URLs with slash and backslash [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-8" date="1598443200">- Resolves: rhbz#1823762 - Backport SameSite=None cookie from
                           mod_auth_openidc upstream to support
                           latest browsers [rhel-7.9.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-9" date="1602158400">- Rebuild to pick up the proper build tag
- Related: rhbz#1823762 - Backport SameSite=None cookie from
                          mod_auth_openidc upstream to support
                          latest browsers [rhel-7.9.z]</changelog>
</package>
<package pkgid="d6dda02b7118e240a4323dd4950bb70c21f285c6fbb42bc24e0c9edbe1cf0820" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="15fdc79fe6e2105bc3ddb0af35fac4074002ee5a9272f9ea38e2a2d1b3830acd" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="990e890efbdd47bca05fdc4cbb2f7279b3a10a62a47a73b38ecb3031da435703" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="6f95691dc8b6f8c9ceb80848fd118494623f73f47eff3c5112c45d101694e155" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="30c4de344b684244fac2d5dd5cdf0ccc155d67ab35d7ccafc602d7030429f8f5" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="5e1d98738f78f816fbb7d373c6c188f5b923ba3f10c326619d69ba976c30019e" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="53d94ccbb412f35a4e8a3777bb46adfa7e29bc96a6aee3d17de8184cda23fc69" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="d4b071f855f468e1389eae18107948a930560e4577af3c7afd409d51c7b90fd1" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3f04df761986b5eeabd6b58990e82bc6c173a3be1151f27824369f2fd259a2d3" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="12249d0af31f145b5820211e42a061b8ba0816e80911548ced52dca993c3f19f" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="d12a78a7c1774ef12b5a6afabb99d91cc997e7fdf9d25bdb94de310d7465c8bb" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="9914b8af913f671e65344b49f91b24aa0b7e844f492d0396c9a5e0efd846a56f" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="dff8c4c4b2637787ac42a0331ba77db83a1e292ef8e1b33706861a1fa73faf05" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e1c2392779cb9d1bc9a4b60b64fb782204824c6d23d395cef25408d57f31ee87" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4febbb7b27c0ef003816fb951e1ca44d87fae28f12b3470143f195a4210a6a2f" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="db75c495cda39c35b547b167f175ff5762c8ff6b6a5be574d776d76fd80700d7" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="02c319612afc9c8da1380f3cdae9fd0a2f43c75a620765987c84fdc35b4286af" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4f908838446d615e772ea27416a90acaff7e54d5ff5738599e786fce12e10bf5" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="9e792250c98091b61ca504c026a51727a38a2b13de88ba1821a499d6d6244624" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b28242ec0623d149f2c9222c03cac87b93ede780ef45427f152cbfb4339e3b05" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3c9cf09417b055c3e975e5a2ed66bb183f35153fbe08279b7b45769d33539339" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="0af8d120b3ded87163100f6164e89dda894a3b939be52d80995f5f4a10b2524c" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="2bc0116497aa23597c8c257f7fbcf8cbbf41fe98afce323440d9006a783d705f" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="8da3c48af363be2a360969697f7705554dc12859ef4e8a9662d1e18c090cf836" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="931b57980fd9988b638f5aa8d06adcdaafd582d903ffa7f3aff663f7e59e3d60" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="b68523c6eb51d39c0ae87ba17f4fd2ae0281e6b6130ff2185a3eb39d1d71d099" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4bb4649333fcb0d0f2df9f2e7428951e511cc6407c23f49d9063b266c2779d55" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ac8a9c213cadb34f554c1499e63f98fadde9bd994132f6586f88157dba77eb43" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="14ac9e0fdbcc45cf386f9b61843543ee8a89d94c15d2be2967c48d8062abfe9a" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e8d37c41a6fb29fc2084c747ed831a4d0c44d0031a98fe23addb8df1917b799b" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="8c9c6f7ec59bd52a06eb247fe5ed683e8f141628f11674cf4b1d4a51d6b6ec85" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f925df9e46f089cee1f87a58bd6806ebba9cc9f1266f81c4e471843812118c15" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="1d7cc5143179dc8ed92e5fb7895685e5dfeb261df4a2d11dd8250bc760baf8cd" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="110df96a2c6891a43bc79ba687331b497d5041967dc67cb229f4612054838efa" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="2276e58d767f5ed66c7f2997a882a7c5daa24cf06d653950632098e1a5195f27" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="1e47154349a978ac5954904e74086b7083c02e412405159749660043ec037cae" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3918c3279560c5c1d179553d89e84113aca6a8c38f2b68411979d66d884b5457" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c97d3a9239d9154907844951e440f7b9d6b50131379b95f0a343893913139706" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="67836181b4dd0844e0d46d902e671b4431279b94cbe93662ebb8b2c4e563a87b" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="144399261d68e5c070a59d02031f5f7fb0bb458730300708d666b5fb58bcbb79" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="70fb784712a9d1163214b09e98ba95a9357c2fb1fcde3cf31103f6363e7e263b" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="504e267a2b0f0341de0ca9dba31406bd4d9e04dead2aea9b68acef027c11041b" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b66a2565efdcf4b7d2551cac9c547a684e1fca88696f0e58d578d7f16e8d0f8b" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="1a111e5fdf6e6b5328d69cf94676a065c0042e835a43a46300432b2c87d25f68" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4ab8ce4c8e930dad6de99bf101ee97de106a62138f486b99a901d8e5bacaad79" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="429f80217315bb9e244b0428d6bc0622c356aa9fce630b31e82f36184b531672" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="d017d00e0d7b13377d7811f2f9c71a000197c192bc3c934b9db83d98ea155f22" name="mod_security_crs" arch="noarch">
  <version epoch="0" ver="2.2.9" rel="3.el7_9"/>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.5-5" date="1347537600">- Enable extra rules sub-package for EPEL.</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-1" date="1347710400">- Update to 2.2.6
- Update spec file since upstream moved to Github.</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-2" date="1349092800">- Add a patch to fix incompatible rules.
- Update to new git release</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-3" date="1350475200">- Remove the patch since we're requiring mod_security &gt;= 2.7.0
- Require mod_security &gt;= 2.7.0</changelog>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 2.2.6-4" date="1353326400">- "extras" subpackage is not provided on RHEL7</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.6-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.6-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 2.2.9-1" date="1459771200">- Rebased to version 2.2.9
- Fixed bogus date in the changelog
  Resolves: rhbz#1150614</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.9-2" date="1662379200">- Move response status rule to earlier phase
- Resolves: rhbz#2124200</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.9-3" date="1662552000">- Fix application of the response status patch
- Related: rhbz#2124200</changelog>
</package>
<package pkgid="f1186315479b6c24c68752875b9da9b6d211e8ef16cdff27b273dbddf8d5da2f" name="mod_security_crs" arch="noarch">
  <version epoch="0" ver="2.2.9" rel="3.el7_9"/>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.5-5" date="1347537600">- Enable extra rules sub-package for EPEL.</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-1" date="1347710400">- Update to 2.2.6
- Update spec file since upstream moved to Github.</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-2" date="1349092800">- Add a patch to fix incompatible rules.
- Update to new git release</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-3" date="1350475200">- Remove the patch since we're requiring mod_security &gt;= 2.7.0
- Require mod_security &gt;= 2.7.0</changelog>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 2.2.6-4" date="1353326400">- "extras" subpackage is not provided on RHEL7</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.6-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.6-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 2.2.9-1" date="1459771200">- Rebased to version 2.2.9
- Fixed bogus date in the changelog
  Resolves: rhbz#1150614</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.9-2" date="1662379200">- Move response status rule to earlier phase
- Resolves: rhbz#2124200</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.9-3" date="1662552000">- Fix application of the response status patch
- Related: rhbz#2124200</changelog>
</package>
<package pkgid="e835360445f29aa245243b4abc1b17cb35485a1c71be633c3aaac4257e01f7e9" name="mod_security_crs" arch="src">
  <version epoch="0" ver="2.2.9" rel="3.el7_9"/>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.5-5" date="1347537600">- Enable extra rules sub-package for EPEL.</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-1" date="1347710400">- Update to 2.2.6
- Update spec file since upstream moved to Github.</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-2" date="1349092800">- Add a patch to fix incompatible rules.
- Update to new git release</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-3" date="1350475200">- Remove the patch since we're requiring mod_security &gt;= 2.7.0
- Require mod_security &gt;= 2.7.0</changelog>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 2.2.6-4" date="1353326400">- "extras" subpackage is not provided on RHEL7</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.6-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.6-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 2.2.9-1" date="1459771200">- Rebased to version 2.2.9
- Fixed bogus date in the changelog
  Resolves: rhbz#1150614</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.9-2" date="1662379200">- Move response status rule to earlier phase
- Resolves: rhbz#2124200</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.9-3" date="1662552000">- Fix application of the response status patch
- Related: rhbz#2124200</changelog>
</package>
<package pkgid="8894a13ab64722d359951d75ec4478c8894c3972ec9fcc0ae8f15289d24e3d67" name="mod_security_crs" arch="src">
  <version epoch="0" ver="2.2.9" rel="3.el7_9"/>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.5-5" date="1347537600">- Enable extra rules sub-package for EPEL.</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-1" date="1347710400">- Update to 2.2.6
- Update spec file since upstream moved to Github.</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-2" date="1349092800">- Add a patch to fix incompatible rules.
- Update to new git release</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-3" date="1350475200">- Remove the patch since we're requiring mod_security &gt;= 2.7.0
- Require mod_security &gt;= 2.7.0</changelog>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 2.2.6-4" date="1353326400">- "extras" subpackage is not provided on RHEL7</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.6-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.6-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 2.2.9-1" date="1459771200">- Rebased to version 2.2.9
- Fixed bogus date in the changelog
  Resolves: rhbz#1150614</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.9-2" date="1662379200">- Move response status rule to earlier phase
- Resolves: rhbz#2124200</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.9-3" date="1662552000">- Fix application of the response status patch
- Related: rhbz#2124200</changelog>
</package>
<package pkgid="f9a64a2af6238cdfa50a4241e395dc24e058d6c21d654e29dfbf9074b6bf7b61" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="dbae9902d146a2e8c92355d63968b2461abbb0074333cc40d0813d2bdbf891af" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="43d981dc16badd620e33cad171a363be5a0e15520b4028887fe08f6cea418dea" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="25019a887b95a274b10974c078189afdd89a502ed2d8fefc23ff587a10fdb9a6" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c9904ca5047838918c3d329fa93e7f5e17330a69dbfeb1ce4b8f3b0ba42cba18" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="56538ae13725fc460b0bdc636421d8f2a45d41e347fe6498727bbe325962b661" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c0cc786b6e1b4a2f9abb3248f27f4291dc66d925d133ef872d4386d0ec5fe8c1" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="f522ec89b6e3414cbc8a758dd1e3187e4fa6af8d90b6671c66874a3a17e60b4d" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c50e1ae5160c0c0e166803e170e548ff96f90d8e4bdfb031c5c84888079b7602" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="5a689848c58a8a048793c1039ec5329cf653abfdb2f7eb49dde848ee4c80176b" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="cf90c89a48e7ba6d1c1384e9042859a3521be7b04d00dd29dfb1d9fb797c10a4" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="df10169514dfcc24b80d443f421171213589e3cea787219815db54627d9b8419" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="8194d8efed2449bcc1b1b79fc48138af2c5db616dbd4e2bdd732926242f8252e" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a9710625f3dc97ef6d9d99f7bf419309edd07b1df1181dbe5ed7b70a9d3d4d6d" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="45cd244d66be37ad1430a0703db076e4d1d314dcfe6cbd76b88f6b920a91efbe" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="6edfd8c2e57ecf2eba8c689e63cd3d7a02473d3e5833bc7a97fc733c98a01540" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="d5ef76f25e6eef11fb3dc4b3f754f5fbb5bddec3612cf51fa23cd97e94224ca8" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="592ed287d18f31fbb365ad148019aa6f9f9b3546e9c3f92ac9ce9d4c88c7157e" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="20cd683e94041385952a1d6627829a28e685f68aeb8f406bdad9631580975b44" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="561fe8a1e25a28b928e71fd67d8cf5ef3ce959267590792a85f97710d70c81d5" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="b7bcbdbe2641e8a1ceb4fd2009b13f4f32f5992139456b2f6846d79154553110" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="25f2449fec46bedc91148af226f5adbce1bc50d375d3604972f54cdb2e0f1e0a" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="e7ac7ed1f4b9275c0c2d368c790853c2c66d058b44fda8aa3106a56922c7679b" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="09551f4f890a582d5199c921ed33acfff0e84759766373dc91492b5c083c79e5" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="806bd5830c27573c94fd4f2ba98f748c04e072aef467bc7dedfae0dc8ca70953" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="7363529ab65e1729986895029431d628260eee132d1c9dea073c04e1d4222dad" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="bc946c54be6cf2f61a1abe0e6dcb2ea6bfa7afa280ca6ba5cedb0d48f67b5ee6" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c1c191109453fa141d27916a3ed6320a69cd08579330db8a3cac3ede8d4546a7" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.1" date="1634212800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a5681a630ba7153b60780023b507336fdae05dc4c16438a5a0c8aa809c484d01" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="db152b67ef91b5d96aef608eb450e22e26ccf3c228fa226f2eceaba872b0f6ef" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.2"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.2" date="1636545600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="9ea9c20ea5e931254f6213d98f97e0f0379b88aa3fbb6b677f64089f0d9e7990" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="8738c71f8fe25905ea8863697f4c1468336500717c43e9aecc7a1d3d26b06181" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.4" date="1642420800">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c36d1b7a065143868d18378ae37ca6f1e0306ada16c6269836c0997e9b9f1c53" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="fc6aadae9e15a33b28feafac192adb0ec09ef84bf9cd49fd76c6ab760a8f79a2" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos.5"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos.5" date="1648123200">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3fd7c15167d30d28104aa04716575df9de10e82d4bb525442735b1f68251061d" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="85abd4de478ed698c02fb3bf330d1b296e29afb53bce1e55eb15ce4ee58afefe" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="97.el7.centos"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-97.el7.centos" date="1605009600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="07854bbe6a7949e65a217fd2d59a55d7b206828f8bdc8b41ab4ec6247ce5f321" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="3eae0d02ca1c4fb91c45e0950ee4c605092fd99cac1c2f2e382957ffde91efb6" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ed97f5a8405ae53fac7d7aa430ea19d86ac8a8f8863987d7f8971a8e44f7ae8f" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="9c9cfee05c53683ffa05e554e7aac47c37eca38bd410b8b2c69884b941be852f" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e77210001d792e6ae8064792ba23f9bf2dffef931ca30986e522815685b2f109" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="1b20f0c384308829fadea12d07f835312bdb3ab3fa498819b2f2a589862ab52d" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="98.el7.centos.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1680696000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c5d621be1dcc879a2ed83bb10560eade4a9048a7c347c30bfa6c466966d5afb5" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="c8d7f3bb955d0ef0353dcb9af11d0ae09c06ab6dd967e479dfa402f402c81700" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-98.el7.centos.6" date="1674561600">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="4e882d835a0cae4ce62fa99c0b6a5196bfe818ca7245fc2c2d46046429645cca" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="3d0d2373f8564bdd2bde5ed7d11b44d21d69f4db540ffc8472c708858e6a5024" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="99.el7.centos.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="83f238434cc4419f47b1b75c50403dbe925b9f800fe412cc0bfa2a03cdd4eaed" name="mutter" arch="i686">
  <version epoch="0" ver="3.28.3" rel="28.el7"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-19" date="1572350400">- Fix invalid read in idle monitor
  Resolves: #1752378</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
</package>
<package pkgid="2dd53334018319653019ca7977d5824b8e0dd0f2008e6434b6364541f80744f7" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="28.el7"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-19" date="1572350400">- Fix invalid read in idle monitor
  Resolves: #1752378</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
</package>
<package pkgid="42caf02e89ecb47b72b5196279144597cfa549e59de0a02493d9be9d74cbe66f" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="28.el7"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-19" date="1572350400">- Fix invalid read in idle monitor
  Resolves: #1752378</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
</package>
<package pkgid="d0fb1ed9ec029dad7c80c31977962af1accf84d7e5aa200fa2519599d37c1a10" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="28.el7"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-19" date="1572350400">- Fix invalid read in idle monitor
  Resolves: #1752378</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
</package>
<package pkgid="46b15d934a46b818a384927d37052a690e62b97ae3370ccebf58a0436ef1ad18" name="mutter" arch="i686">
  <version epoch="0" ver="3.28.3" rel="30.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
</package>
<package pkgid="ea965804313506f9afdc3b08acb31d38cc3fb9a82569b585edb75776e9aa7b78" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="30.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
</package>
<package pkgid="8960ff16f1065ed6951655a1750996dffa10970d15133f8239f71420ae8a326c" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="30.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
</package>
<package pkgid="dc6bccd6d6c90f6625250e3b40d50744bf4e4bb03b368ca9aed3145e9f1f5f9b" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="30.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
</package>
<package pkgid="d8fa5d8ae9dff5687b62830ffd2a418f1fb8bbf965f73acc9c5fc08dd74ac747" name="mutter" arch="i686">
  <version epoch="0" ver="3.28.3" rel="31.el7_9"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
</package>
<package pkgid="e6767052bef6aab79b3b84d3c0f968aafb8fa781fb41f3fb4e2a3edf99468100" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="31.el7_9"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
</package>
<package pkgid="c13fb88e4ce3d2aedf5cea69d0aa4856c981ab9186e4ad0cf4ba2ebed9d1d975" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="31.el7_9"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
</package>
<package pkgid="91d66b57ea6cee29a812a99db7ea3e0689638b4a76633feb380b0ec12d1daf32" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="31.el7_9"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
</package>
<package pkgid="5ccec63d42150b4c1e78aade329d37528cf4b6b10cbc9b0999ac364739871ebe" name="mutter" arch="i686">
  <version epoch="0" ver="3.28.3" rel="32.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-32" date="1658923200">- Fix _NET_WM_FRAME_DRAWN timestamps when overflow occurs
  Resolves: #2128996</changelog>
</package>
<package pkgid="c2e63922ea6fde3b6c639d29f90253478a23fbdf3106e06b74d2cfd4c1136080" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="32.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-32" date="1658923200">- Fix _NET_WM_FRAME_DRAWN timestamps when overflow occurs
  Resolves: #2128996</changelog>
</package>
<package pkgid="ccf59b7c70e7aa6bc9b969eb3c886ac09db5296320bdfbc84a063e17e3a86718" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="32.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-32" date="1658923200">- Fix _NET_WM_FRAME_DRAWN timestamps when overflow occurs
  Resolves: #2128996</changelog>
</package>
<package pkgid="31daccfbf52b3da2b7d9b88bad232ba7fba9d6547777e293cea6835ee9ef19f6" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="32.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-32" date="1658923200">- Fix _NET_WM_FRAME_DRAWN timestamps when overflow occurs
  Resolves: #2128996</changelog>
</package>
<package pkgid="a79f5833ea19a9a0d9a6d1dd03d98ff1b0c18661b439554abd2b1a2650e778a3" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="28.el7"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-19" date="1572350400">- Fix invalid read in idle monitor
  Resolves: #1752378</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
</package>
<package pkgid="150ff35efc5e1133e3cb390ff6b8e86aff4621ef0c8c5a1a3b76831178e7a555" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="28.el7"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-19" date="1572350400">- Fix invalid read in idle monitor
  Resolves: #1752378</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
</package>
<package pkgid="4fb53343f63a6902567a4443a89c037029b86bc5d09f04105b1d5d82fd5ffb67" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="30.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
</package>
<package pkgid="d2dff4eaf5a5cc71123a9808f0015a2ee69ecd2de8eb0dffe76d8e5ba001f3b0" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="30.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
</package>
<package pkgid="18a8792b79e2e7fa72bc93dc4ffb321b1d1cb82800ec0cbc26910988da3285de" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="31.el7_9"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
</package>
<package pkgid="53d937f12ef04837dcb877265858860d0d37b207ed4a05b8d4c812ea4e217489" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="31.el7_9"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
</package>
<package pkgid="7dd38a7cdfb7798b01f20bdddd33a952709a652e301366bb6f52cbbc554ee852" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="32.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-32" date="1658923200">- Fix _NET_WM_FRAME_DRAWN timestamps when overflow occurs
  Resolves: #2128996</changelog>
</package>
<package pkgid="be843b2f8b816bca985f7208a7f97aa5de34e22ae407e1a400799419cf9c79f5" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="32.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-32" date="1658923200">- Fix _NET_WM_FRAME_DRAWN timestamps when overflow occurs
  Resolves: #2128996</changelog>
</package>
<package pkgid="0c0bdb2b2a163d8a66f7549a4496a9e1714bff5bcb0e1344b8b4d0f2533656c0" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="28.el7"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-19" date="1572350400">- Fix invalid read in idle monitor
  Resolves: #1752378</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
</package>
<package pkgid="8ee7a5a5ba3efbad31ce4102050459fe8200cdc2949df62614be6f7755bda45a" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="28.el7"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-19" date="1572350400">- Fix invalid read in idle monitor
  Resolves: #1752378</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
</package>
<package pkgid="b501cdd2add221912db414f8b50a2dc3258f3777e5c83e6341fc9230a22d2015" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="30.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
</package>
<package pkgid="facca587ef1049df431b6bc1a75f2827f6ac8e8715750f4682fe54e0fd213b7b" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="30.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
</package>
<package pkgid="7da4398ac517743d10eac5f2924b037e91822a557d6d37ea3aac31858e9a4718" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="31.el7_9"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
</package>
<package pkgid="bfee40430d3a1b4ac801490e6bde4489216b6ee4df824ee5c0da45eba91e9856" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="31.el7_9"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
</package>
<package pkgid="23666f76472c156adbb19c1a5eb7308898e7f33a9f78da699538d0cfdf066fa1" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="32.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-32" date="1658923200">- Fix _NET_WM_FRAME_DRAWN timestamps when overflow occurs
  Resolves: #2128996</changelog>
</package>
<package pkgid="525bf87846cdc925c93d3d13e8dbbe3b8b6ed82cddaba5b53688abf6bb5100d6" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="32.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-32" date="1658923200">- Fix _NET_WM_FRAME_DRAWN timestamps when overflow occurs
  Resolves: #2128996</changelog>
</package>
<package pkgid="b2a7dfc0efe57e5942ddbc583721cd5690f947232f01f540f8a8598a5747f7f7" name="ndctl" arch="i686">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="8a15d05a3ec89199f5296c68868dfe2830df39683071e448785a847347c7b5b0" name="ndctl" arch="src">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="fc62b73cadb752c36d37ec094b7c264e31965462e7c0c3af35ce258ee2f0cd0a" name="ndctl" arch="src">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="e9db1de04618db2094841c053bd28a27fa87758fbbf3bdba827c4bc7e7987776" name="ndctl" arch="x86_64">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="d7a35b9393783f8537954e5aae47a4da62a38d54853bf374ac462a3400c7ffa9" name="ndctl-debuginfo" arch="i686">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="c760b7c77df2976121de25ac75fd96b8f7e00642885478817781ee7fbb99a554" name="ndctl-debuginfo" arch="x86_64">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="99e6c9f0fcafaa30fa3163470bf3fd2b98024b90a4f3d9b45933061f0259cd9c" name="ndctl-devel" arch="i686">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="6615328d0e65320027a0267004c697af13002c9e6549a2dc6d7c7c2abaf73139" name="ndctl-devel" arch="x86_64">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="d73dc8f6a45c2b655f40f6e281ef3d899b747c1cf4e2890f28f19faccafaec6f" name="ndctl-libs" arch="i686">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="a7baba2a067f45a5087b0963c094e2c1b19ff6900c36d09cba4d0738a7b76b42" name="ndctl-libs" arch="x86_64">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="3b2bfd1e59f93b9ca90a791aceef3a257854bdbaac20d4b6cbc441d17bc2f6a7" name="net-snmp" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="cea003184c71bc9d3d88da00395cd926f21a5308f201ab8130ad4a69bef38bfb" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="308871e5f03442646c37b3d8a6685297caa73a036ab12c00de45649b11ccb0f2" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="dbc21678d17bde18f6daf8664bced6961be41e8ea17ed044505304c617b06c70" name="net-snmp" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="4ab22f3d67e3735d3478631d7cfb19e46816380f41ef8a1fe30f7f7cbbd2940b" name="net-snmp" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="f48c3b6dfccf58c0e232dbcf45fab2c5ebfb671f291b6830c91892893e764b21" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="e53ba0092159015c28683467ef6ec46e66999e481232d1a657bf1a18e9162e9f" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="bf5cbd435de8c34aa4df26f521836425739a6656cb3d7bfb6837128512a26cdc" name="net-snmp" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="72583d87adf9b93e5320ad7265ae7733528f9838f5b7433a79f4c833a1546368" name="net-snmp" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="f4ee45d9e29e3ebfe0d7d8cddd9d1995e3fdb534df35fd79ceb6bce2a521a77d" name="net-snmp" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="4c2377f54f20f152b07422a6d236c0bb5fdbbdcdaa0415c7ecd4771f98a0c4b3" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="a996ac5c8007cf258239f133797a559b0d4ccb8b0298138b2a84b495acf9ff89" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="4ba44ef525b25850290c38cb83c75204906369197015bf78f3ef4cc301493d19" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="c522e9db97bde5918bfe6eb9f2df31981cd9fe07bf8e50850ec2bad7d7314fe4" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="27c9216574aba55c3311768a6d3f2b072ce6263c6e7e400e964c70607b01c5b9" name="net-snmp" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="372110db05ebb0df836894d52a1330202c9bd3d94bd8b2d5fb4846767fa20f40" name="net-snmp" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="45cff1b9b017e477a9799d1ab510580da4c71a8481b80d21f2754e1622fa48eb" name="net-snmp" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="8ad712177cc724eca879e6f3affba0c8b32202d9fed4761fea169e44535fbd7d" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="5fc2213235faddd06a2024ca04c2353660e6ad12b828c55bdfba2287539e2548" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="f97a62bed0c67801ad07faa299d581757bb73b0df5edf9fc54ab0284548d314f" name="net-snmp" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="86affa2b06b4933bc036bdc03a9ba07f4469cacc3710bd2fa16ca949440e730b" name="net-snmp-agent-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="9aff13dd7ead72f5dcd86ebadba1f4dc8c33eacd70897f7587042437161581d0" name="net-snmp-agent-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="8964ab5b5c4b02575c36f159356609b23120248140d0054425a8d9b4431fe6f6" name="net-snmp-agent-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="6eadd333ad38d506bcdd3475a5c074da71a3361f6013891886bf9633584092d7" name="net-snmp-agent-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="bd32f02fb94e8f0d3274825036dfbf2855322922cdaa45e9bd2f2c0ba1d8b82a" name="net-snmp-agent-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="779b6f6d8fcb82077c0924abe747f52e79bb869bbbbb52fac93cda23d9cbced6" name="net-snmp-agent-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="47fa48f399defc010f2e6f1c546b2b254d97ff9c68c8012cadcb00f5f6ba8986" name="net-snmp-agent-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="8e4fe694522244e263bac5969eb22c9a5f845d5978e6285a9ae6f24991aecc3c" name="net-snmp-agent-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="c4bcb925a3118932c0fe8b0100b63402105d4acdfc5dcc5fffbe5ce06ae696bd" name="net-snmp-agent-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="880805403100699e02398102ae1b4d970accac922f6abf9e6db303d5fa482ff8" name="net-snmp-agent-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="8d6e8d17f5a908178020f21a0f54edd95bfc9824ac2b545e709a3ee975e85815" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="7482844ec0a7c9a346178727c8306c390b136cfb6c2d112a98e24ba0344479a1" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="c4ebcd9c87929d7780ec520d0ef1e3e7f8046d838e184977bfe006b6139871d5" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="e75ac252a0847c5c5fdc35bb2d14bdb3022edfa7fc36cd5f888de6b065d35c86" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="70742a35128b6688543c8bd38c0c87feb23e609796b102005ac44084e9f7e757" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="9c010078e8b30ce5a630aa82cf13f8a20a1b421687672a2e857c8c17294a0afc" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="851d2262b2103b24f2153cc206ec0786b751d20d36bf5c7f7a479207660cdc4f" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="2884c0ceab9520407823b16e26c083fc1a83c71df8da94ec16fd173bdac1d370" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="d9586d762334f42a97db4a6633c91cc3a7af8faf53d3d2c4f7d5355cfb7ae6f2" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="b8049454334be184e3ee62d47fe24f46133f1c379b316afd0a97b452507a7a01" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="a5f2929256c08a03accf02a81bfd3076afb7ba392d76723ebec245616bbcd531" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="c759dadabfb5f9a75ca023e14ac927a5f43c53181b0387a1e9f04c45366c2327" name="net-snmp-devel" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="91b238e4cf088fec7ec76b7b05443a1f577417f6b41b6190dd25199f40a15cc2" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="7205bbee55054fa9f08247511ad4bf79b7bace6240e8c0549f7169c9f7092d9f" name="net-snmp-devel" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="1c6fdd968f8a2cf6e068f2935b214ab5a19e5de34673d8ebbb7aac427b079e28" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="8a7e83eaa8b7fe7fb209b9aa4fd7a62df3d567836b3b7c31dc4a26ddae4b966f" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="bdbd17cb8d25cee417ceb23168caf055a71d2d6c8844a089aa704aa06a86ca1a" name="net-snmp-devel" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="d8ba31b93455708a94c44b2d4556b43e03979eee44e4edd1e6def4a0ed575ffd" name="net-snmp-devel" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="f2fb0423f7e87624b4a369a4171f2f2a90bdeb91167dea8f4a60652633b6b557" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="4ae3df5b91b62feae0841f771145495bc6633b7c5d18c5ec50da9efee6d06b60" name="net-snmp-devel" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="eb0d60b51ef9dad750897b695856dbc34145ac2b094bde9d7a3f28c047dae6e7" name="net-snmp-gui" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="7cd1a45917acbc59c1381eb6fed36668fc6bfb9cd8d0e34969989870f5e801fb" name="net-snmp-gui" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="d6cf7769c19a63e5740cae589011179ec8a8e801c53899eb49c2fec515774679" name="net-snmp-gui" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="c677e6e296a4f7d3c1465e29be96138d192f6a8fc6624ec15ffceb3cf8366b8b" name="net-snmp-gui" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="927a47cde64ccbf2c0b7d9cd05e5ab4b26c91628dcd9cf00306c31d187029b3f" name="net-snmp-gui" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="e4110a3b4dd6582632d9cdaf59a4c59221711285b686179839486d2fd82857dd" name="net-snmp-gui" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="0d5e1dc07299044fd6841e345c15944088da30614a474b197b41ca077e05688c" name="net-snmp-gui" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="bcc314fdd235b78059d4dbf3b00364a20e9c2ab2958fbb02e7de1915e155ce45" name="net-snmp-gui" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="b1d1e529397ab35c530aadf7b9add2000bea6128393385ee8e69f74bdd9d4f24" name="net-snmp-gui" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="e0f6ce648bc9a9195f22fa7b28bc8cff2fa54708aa15e7ffc23ccc44907d8198" name="net-snmp-gui" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="aa437a3267903ef215d2b165e75cbd8073bb53e1189d4d950f57666e75aba684" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="2f65277bac45286c1184361320c326884f1b6454ee8cecd35eb08845fbcbce2b" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="0f4683b67673f601b34a208ad4e7ccaa8731e4bac37a8dfec08dd06d91c86286" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="1b1c8ebffcdad9c5bf9d62466952985d037c7355ebf08db9f1957f641fc4deee" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="58102b1ffc4e109afb90a75839c0aa5e0e0252e92922d3cc5f5e50dcbbc47d2a" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="92fff055d76bc6ba9f962dbcd14a60233e6661a99da988c97cd470ecbb16cff6" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="95b7090d5b0b8e936669dfcc07915bc2b2fe7467d9ca1bd55508b3fd6f12518b" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="358b14434985a452c771ecdfbb18d79424c7c7665933ab9470551d559bc5cff5" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="e6022d44040a5d7dd63d02f5ead48c1868adde72cd60cd09f4c2a6302b402b5f" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="1bd333caee42eca0355b17aecf76180c4609906b17843f1af53212a7c732a76b" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="002abde0b7b61a9bf45e870e4c19f32cb4c3e557f9d9ce5160c2a80856986c3c" name="net-snmp-perl" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="c5b5e86a8b627a8cc2ec09b57c386c23a5f24b5dba9108b721d6a1eb1c59fbff" name="net-snmp-perl" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="4056fbaaec204bff7e09715866588ce4c75a59793aa17d58b131a09d0fdd033c" name="net-snmp-perl" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="2a53870703686fafee37d0871f581465d77ef93fb6d2fa85ab943a1055d2c77d" name="net-snmp-perl" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="f0a72ce3df552d4f081e55464485699e3647735fed621293fa9320552d5b8725" name="net-snmp-perl" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="6c62311419deff41a90949e3e3cd3c688356db34c61e16db313b7ef80ee500fe" name="net-snmp-perl" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="f22c51006c938166a6cfc637596073586dcce4ba97d2ed875c12c381522a0148" name="net-snmp-perl" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="9433da3eb28cfae3766a18c1db0a2c06de5989bffce3e461b59335104cd8fff8" name="net-snmp-perl" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="89305d3e09366d3f6a713d7389cd159cf007f8b16675c1a9d3a3263badf80fc5" name="net-snmp-perl" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="072c4789daead5af089be781ca9c7434f71a890fc799221eeea49d1bb36c803b" name="net-snmp-perl" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="5057f0c3ef91d250394f8cd31ce518580f20c219f42f2741cfe961ca64f8c510" name="net-snmp-python" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="5eaab0e50bb9809ca4ba06c6eac6bfa8d02b9d00fdf566c0fc68fb030564568a" name="net-snmp-python" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="606d38f1afe905920637893ed0b82043673d6a32df0b7984f483c2e1410b98dd" name="net-snmp-python" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="1cef2fc82d24316ff45450eee5a02c9adc81101a73a00f54e898f32d4755f540" name="net-snmp-python" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="46b9d1120d6d1720f01510b1e90ee4a0cb6a052889b7921eff5497d1f23e7931" name="net-snmp-python" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="b01b2edf579081b861d32beaf0aab35d8425b3320bfcefd453735aeb39b34489" name="net-snmp-python" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="c30ca5b3309bbd15c459feb86569ac838b7bf034342aaaae915b6a62b53d1d99" name="net-snmp-python" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="481a3a3d5ef80479c57fa97f7d9e79c6cef07e86b86d05eaa4b75fb94ab11042" name="net-snmp-python" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="43567529d1a6aa28406ba4a0082972e2645c1ab24ad3aac9a98d8440b0f2ed5d" name="net-snmp-python" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="65c7390fcec82d2e9fcf66badf6f2378252c466b9ada72a4091068ede11b0392" name="net-snmp-python" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="223381c6cb1d0b5248369613eb727920bf8fed335ef8b3d835fc5fbefdaab259" name="net-snmp-sysvinit" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="c797111e0f306d7aecc3200580de72b5a20422f980e0443f2908cdd19612552a" name="net-snmp-sysvinit" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="b63a57e4d6de780b3928b73df8b97615ccede42109eb489deea7b943eaa22853" name="net-snmp-sysvinit" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="53e775a14ac5e50eed359791abb595bad0b2263c1db48b63d1b00b7992e13c2e" name="net-snmp-sysvinit" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="65c8d2e22c44e743151a36c47eb8ffb28d4b25b77565e6d97f0b5bb23558d98b" name="net-snmp-sysvinit" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="fbdc2bb555c915ef48635011f45ab87eab8e833e57b866dc5088b681084725db" name="net-snmp-sysvinit" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="1c4955679c0caf026633be4e21257c18dc6cb761a427041f3e095c2f56f61939" name="net-snmp-sysvinit" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="69ab3e20ccd1821f5e27d9479724addf708fe05e5d5126a112bfaa5a2edd861e" name="net-snmp-sysvinit" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="74f8d1b2a08a63c4879754cd5d19b58f3821d5e69fbaa0518ccffc4374b687a3" name="net-snmp-sysvinit" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="118da77c1c04c3c8bbe7843a1ee0ba1a7c4d0c2c7ccc199b7aa82ebca1c51787" name="net-snmp-sysvinit" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="11beb1feb60c3e15c88be5abf25abd64dd57eebfaa261fbb6f74d7d1b2220c85" name="net-snmp-utils" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="51b5e4ba1f2e08c75e7f334060448ae4c8d02ce64b823e02d13163092b94f6c8" name="net-snmp-utils" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="ae6a1ccbb6730fcc9c50adef7fc5bfef0812928794696337243abecb62f2106f" name="net-snmp-utils" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="d3f720eac4ea80232d7c019a77a543d21fdfaae1666a177371f26b1323b6688f" name="net-snmp-utils" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="1faefb88471ea1ad3f9d543fbf3f2e798c046025d37d37f0df1b4c490f47ee1c" name="net-snmp-utils" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="0c4841288c28bddd355be2069cf27121fda1be0340c861431f2d8f8c8ed599d0" name="net-snmp-utils" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="dc94cc00e66a516c577998ddb3831ff6fdee2e9b4760cd6cf592a20cfe44aa02" name="net-snmp-utils" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="1969e660ba2acef2b0f35964f74ea6f76b7ed7f1a7a06deb6edaaa7d39fea4a9" name="net-snmp-utils" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="90396155e7207e62ff4c874f41c75443e12cbfbe8c784dcca597bde10e398ce5" name="net-snmp-utils" arch="i686">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="b4406060fe4ec941762e1f0296915281a6cb9ae8584bbbce8b9bfaf850cb384e" name="net-snmp-utils" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="1854a0927b3aa98d88df0d0a35ce211f6b948d4006c226796590f92294093095" name="nettle" arch="i686">
  <version epoch="0" ver="2.7.1" rel="9.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.6-2" date="1360152000">- nettle includes use gmp.h</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.6-3" date="1386936000">- Added patch nettle-tmpalloc.patch (#1033570)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.7.1-1" date="1389787200">- Updated to nettle 2.7.1</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-3" date="1406548800">- Added fipshmac checksum (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-4" date="1406635200">- Correct path of links (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-5" date="1456920000">- Fixed SHA-3 implementation to conform to final standard (#1252936)
- Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
  in secp256r1 and secp384r1 calculations (#1314374)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-8" date="1470657600">- Use a cache-silent version of mpz_powm to prevent cache-timing
  attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 2.7.1-9" date="1617796800">- Port fixes for potential miscalculation in ecdsa_verify (#1943156)</changelog>
</package>
<package pkgid="267800c551ee191332b38eb6c0a62f3ac7fb20ca5b809c8acd9bfc819f7c121a" name="nettle" arch="src">
  <version epoch="0" ver="2.7.1" rel="9.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.6-2" date="1360152000">- nettle includes use gmp.h</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.6-3" date="1386936000">- Added patch nettle-tmpalloc.patch (#1033570)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.7.1-1" date="1389787200">- Updated to nettle 2.7.1</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-3" date="1406548800">- Added fipshmac checksum (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-4" date="1406635200">- Correct path of links (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-5" date="1456920000">- Fixed SHA-3 implementation to conform to final standard (#1252936)
- Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
  in secp256r1 and secp384r1 calculations (#1314374)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-8" date="1470657600">- Use a cache-silent version of mpz_powm to prevent cache-timing
  attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 2.7.1-9" date="1617796800">- Port fixes for potential miscalculation in ecdsa_verify (#1943156)</changelog>
</package>
<package pkgid="7d1135f0572d755154ad7c83f53c3585c5307b1ce48839110030fd520b98b95f" name="nettle" arch="src">
  <version epoch="0" ver="2.7.1" rel="9.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.6-2" date="1360152000">- nettle includes use gmp.h</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.6-3" date="1386936000">- Added patch nettle-tmpalloc.patch (#1033570)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.7.1-1" date="1389787200">- Updated to nettle 2.7.1</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-3" date="1406548800">- Added fipshmac checksum (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-4" date="1406635200">- Correct path of links (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-5" date="1456920000">- Fixed SHA-3 implementation to conform to final standard (#1252936)
- Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
  in secp256r1 and secp384r1 calculations (#1314374)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-8" date="1470657600">- Use a cache-silent version of mpz_powm to prevent cache-timing
  attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 2.7.1-9" date="1617796800">- Port fixes for potential miscalculation in ecdsa_verify (#1943156)</changelog>
</package>
<package pkgid="458a4854e61cb8f659128de085b7a205908733065a7f395d5f9b3b80b9d75d3d" name="nettle" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="9.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.6-2" date="1360152000">- nettle includes use gmp.h</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.6-3" date="1386936000">- Added patch nettle-tmpalloc.patch (#1033570)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.7.1-1" date="1389787200">- Updated to nettle 2.7.1</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-3" date="1406548800">- Added fipshmac checksum (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-4" date="1406635200">- Correct path of links (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-5" date="1456920000">- Fixed SHA-3 implementation to conform to final standard (#1252936)
- Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
  in secp256r1 and secp384r1 calculations (#1314374)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-8" date="1470657600">- Use a cache-silent version of mpz_powm to prevent cache-timing
  attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 2.7.1-9" date="1617796800">- Port fixes for potential miscalculation in ecdsa_verify (#1943156)</changelog>
</package>
<package pkgid="e11f25124066707e663751dfed924aea63362583c39799655aa59ad36963fab3" name="nettle-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.1" rel="9.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.6-2" date="1360152000">- nettle includes use gmp.h</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.6-3" date="1386936000">- Added patch nettle-tmpalloc.patch (#1033570)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.7.1-1" date="1389787200">- Updated to nettle 2.7.1</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-3" date="1406548800">- Added fipshmac checksum (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-4" date="1406635200">- Correct path of links (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-5" date="1456920000">- Fixed SHA-3 implementation to conform to final standard (#1252936)
- Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
  in secp256r1 and secp384r1 calculations (#1314374)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-8" date="1470657600">- Use a cache-silent version of mpz_powm to prevent cache-timing
  attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 2.7.1-9" date="1617796800">- Port fixes for potential miscalculation in ecdsa_verify (#1943156)</changelog>
</package>
<package pkgid="ad5d5d77d705e0b2e0735dd1628adcff10bd9ea8de2cf8e6f94ffc3117044c58" name="nettle-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="9.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.6-2" date="1360152000">- nettle includes use gmp.h</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.6-3" date="1386936000">- Added patch nettle-tmpalloc.patch (#1033570)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.7.1-1" date="1389787200">- Updated to nettle 2.7.1</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-3" date="1406548800">- Added fipshmac checksum (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-4" date="1406635200">- Correct path of links (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-5" date="1456920000">- Fixed SHA-3 implementation to conform to final standard (#1252936)
- Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
  in secp256r1 and secp384r1 calculations (#1314374)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-8" date="1470657600">- Use a cache-silent version of mpz_powm to prevent cache-timing
  attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 2.7.1-9" date="1617796800">- Port fixes for potential miscalculation in ecdsa_verify (#1943156)</changelog>
</package>
<package pkgid="c554c2f911d9c3735a09f85622d991203a2be2ef41fedef96263081dd67c91d2" name="nettle-devel" arch="i686">
  <version epoch="0" ver="2.7.1" rel="9.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.6-2" date="1360152000">- nettle includes use gmp.h</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.6-3" date="1386936000">- Added patch nettle-tmpalloc.patch (#1033570)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.7.1-1" date="1389787200">- Updated to nettle 2.7.1</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-3" date="1406548800">- Added fipshmac checksum (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-4" date="1406635200">- Correct path of links (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-5" date="1456920000">- Fixed SHA-3 implementation to conform to final standard (#1252936)
- Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
  in secp256r1 and secp384r1 calculations (#1314374)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-8" date="1470657600">- Use a cache-silent version of mpz_powm to prevent cache-timing
  attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 2.7.1-9" date="1617796800">- Port fixes for potential miscalculation in ecdsa_verify (#1943156)</changelog>
</package>
<package pkgid="73d5746d638647905da8df916dfd238a6757bf1a9921cb9268fab88f1f5d233b" name="nettle-devel" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="9.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.6-2" date="1360152000">- nettle includes use gmp.h</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.6-3" date="1386936000">- Added patch nettle-tmpalloc.patch (#1033570)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.7.1-1" date="1389787200">- Updated to nettle 2.7.1</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-3" date="1406548800">- Added fipshmac checksum (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-4" date="1406635200">- Correct path of links (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-5" date="1456920000">- Fixed SHA-3 implementation to conform to final standard (#1252936)
- Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
  in secp256r1 and secp384r1 calculations (#1314374)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-8" date="1470657600">- Use a cache-silent version of mpz_powm to prevent cache-timing
  attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 2.7.1-9" date="1617796800">- Port fixes for potential miscalculation in ecdsa_verify (#1943156)</changelog>
</package>
<package pkgid="fe2af35c9a0dbefa58ca84d05d27f8328f2fb55b82adf191d992d1dd3ecd1f45" name="nfs-utils" arch="i686">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.60" date="1534766400">- Updated: nfsd: Allow the caller to turn off NFSv4.0 (bz 1596138)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
</package>
<package pkgid="9dda6385bf074f07f4b097072c9d8bc982cea6f6cc5bf7cb38d13de4b9c5d432" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.60" date="1534766400">- Updated: nfsd: Allow the caller to turn off NFSv4.0 (bz 1596138)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
</package>
<package pkgid="3e35b1cd690d7f05e5a9a3b7d7d73c06aa1f25594a51b98a6b2d5e2aa09bc490" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.60" date="1534766400">- Updated: nfsd: Allow the caller to turn off NFSv4.0 (bz 1596138)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
</package>
<package pkgid="2070385cb0dc05e423e85d6560adfd60a82f226666cc1ee01c4b3e6d30501328" name="nfs-utils" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.60" date="1534766400">- Updated: nfsd: Allow the caller to turn off NFSv4.0 (bz 1596138)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
</package>
<package pkgid="01c87c6880e085380b3c4c50de0808b594d4fd8cb47be2117ef86b99d77ff8b6" name="nfs-utils" arch="i686">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.2" date="1628596800">- gssd: mutex updates (bz 1990981)</changelog>
</package>
<package pkgid="e91c8e216066436e5b1bcc70f394bd3849d8912c32697c05afe4e922b3e012a4" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.2" date="1628596800">- gssd: mutex updates (bz 1990981)</changelog>
</package>
<package pkgid="4806947b6d3e3ed74df32c73ece6a92cab83942c0346d7ef47ae7e88ce916325" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.2" date="1628596800">- gssd: mutex updates (bz 1990981)</changelog>
</package>
<package pkgid="465178377b0512e8f449eaf5a450b4a933977b1db3ddc6a5183357db932498af" name="nfs-utils" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.2" date="1628596800">- gssd: mutex updates (bz 1990981)</changelog>
</package>
<package pkgid="d318c81012e2e00cd4a7bbb87888991d358b6d9c07f72b334a42255b1b925cd0" name="nfs-utils-debuginfo" arch="i686">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.60" date="1534766400">- Updated: nfsd: Allow the caller to turn off NFSv4.0 (bz 1596138)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
</package>
<package pkgid="2d7faa918cf6f7559273f52dad0c4389115c8d0cae4a21fcd37019604ca26ec0" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.60" date="1534766400">- Updated: nfsd: Allow the caller to turn off NFSv4.0 (bz 1596138)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
</package>
<package pkgid="5a54396b3ef80a4a025d929843871a5b944be8fd02147ef5da00186268d67d32" name="nfs-utils-debuginfo" arch="i686">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.2" date="1628596800">- gssd: mutex updates (bz 1990981)</changelog>
</package>
<package pkgid="c8d0c673fd6ae6cc42c48466616bbd0d804bd57c25440bcf05ccbf13fbb7caa0" name="nfs-utils-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.2" date="1628596800">- gssd: mutex updates (bz 1990981)</changelog>
</package>
<package pkgid="42be339b2c37433b924cac4cdf1b21eea0662c0428cc0cf3bae5b168d6f265d9" name="nscd" arch="i686">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="e4a2e214227cd94063755b02d71648bfa36734ae95a6b4f54abf0df142e8dac7" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="ce6bd082d87bfbc13a5fe98c100d762665b64d0f482cfc9fab6852c5a2ba616e" name="nscd" arch="i686">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="3f53f45c15773d86036861cfbd976ca1236ccbe1680c24316fe4e6047f4f55a9" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="5e917977b79ad2f4c4557ee391f40a4edcc1260be56e84fb4cc0c285f8e46226" name="nscd" arch="i686">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="1e161273a8668e9ad342d9b9f42556906813535a53fda477573ec93e1620b897" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="8f8640f7962b8e3e7953d31695281f1abb59df1391b93bd8dcc73c51c1fc5b08" name="nscd" arch="i686">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="a74a9ed2c05c05d159869c3ab6229427f0c7c7ee782f253c2805656b02e1bbc0" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="fced926d687c9fc59c351f93448714e6466a8b42829b5d7d01634339def1d048" name="nscd" arch="i686">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="f5da81ad1aa4d95378a5c704aa338bb9acd929a7e388c587d2d1f2a74285d3a8" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="967ef40966ff3dd41ca54807465edad994ca7fd2e67789775e771f1632fbefa6" name="nspr" arch="i686">
  <version epoch="0" ver="4.25.0" rel="2.el7_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
</package>
<package pkgid="23636ee5518c32965b72699e71062caafa547629d4c9a7516de73b3bca0e33aa" name="nspr" arch="src">
  <version epoch="0" ver="4.25.0" rel="2.el7_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
</package>
<package pkgid="f4965b41e24fd95feffd65822b3d217e7d5f17d87dd09f47b8db6d2202b8c7b9" name="nspr" arch="src">
  <version epoch="0" ver="4.25.0" rel="2.el7_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
</package>
<package pkgid="9ed91148839c396fd2e8473691ab0355aa6090a1e26074c7a7c00cdf4b762a46" name="nspr" arch="x86_64">
  <version epoch="0" ver="4.25.0" rel="2.el7_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
</package>
<package pkgid="a1e9841f7bba998675c2753f3b3543beefd4c41c50f3fc89d86ff0e13207a863" name="nspr" arch="i686">
  <version epoch="0" ver="4.32.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
</package>
<package pkgid="18263e64cff69bdc3588372e0f5980a6c94c5a58597bacccfad70d48cdb5f80c" name="nspr" arch="src">
  <version epoch="0" ver="4.32.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
</package>
<package pkgid="197243a1b35cf8bdcc3e32ce28af776bd1b4fd6c8e47fdaa9274cd8e2d2fc156" name="nspr" arch="src">
  <version epoch="0" ver="4.32.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
</package>
<package pkgid="8ff74bc8bff27c9a85a9e19804c851866d4913800077a48654054b242fd5c06c" name="nspr" arch="x86_64">
  <version epoch="0" ver="4.32.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
</package>
<package pkgid="27e39e03cb782de0ae1b246ed5a9d0068ba7c301fadaca1dd6eb46615a62050f" name="nspr" arch="i686">
  <version epoch="0" ver="4.34.0" rel="3.1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
</package>
<package pkgid="887ad61be4af70087a93fa48b16ce44499bca76e0514f86141dfffec5d271388" name="nspr" arch="src">
  <version epoch="0" ver="4.34.0" rel="3.1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
</package>
<package pkgid="452a394730a75366cec9ced26d0504bab492f1676c129a5faf734f60a194751b" name="nspr" arch="src">
  <version epoch="0" ver="4.34.0" rel="3.1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
</package>
<package pkgid="ff87d7a6e35f37ae4cb58e79af24ac54a1874e3953a1f7fe8e67a1f2288c2efd" name="nspr" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="3.1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
</package>
<package pkgid="b417e1e25894214bc428be7e98b10203332a956c546a2e0c979deed7a45dfcbc" name="nspr" arch="i686">
  <version epoch="0" ver="4.35.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 4.35.0-1" date="1687953600">- Rebase to NSPR 4.35 for firefox 115
- Move from deprecate %patchN format</changelog>
</package>
<package pkgid="578f898541e31068b91d3ed4c07022044971d82f8998b037c3b8d6a3134ce7af" name="nspr" arch="src">
  <version epoch="0" ver="4.35.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 4.35.0-1" date="1687953600">- Rebase to NSPR 4.35 for firefox 115
- Move from deprecate %patchN format</changelog>
</package>
<package pkgid="fcad3fdc69f0d01839b68757dc95a17b38fa3768a1d2fc4b573a7e71078c0cc2" name="nspr" arch="src">
  <version epoch="0" ver="4.35.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 4.35.0-1" date="1687953600">- Rebase to NSPR 4.35 for firefox 115
- Move from deprecate %patchN format</changelog>
</package>
<package pkgid="dd3f2f8a7fceff429481a4c0c22af34286cf905ed7d9e03aafd7912ff28e0bb5" name="nspr" arch="x86_64">
  <version epoch="0" ver="4.35.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 4.35.0-1" date="1687953600">- Rebase to NSPR 4.35 for firefox 115
- Move from deprecate %patchN format</changelog>
</package>
<package pkgid="90129790c1cf2cbd4c7accad44ecb061b608aa62d939438814502c45c6a74380" name="nspr-debuginfo" arch="i686">
  <version epoch="0" ver="4.25.0" rel="2.el7_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
</package>
<package pkgid="1d795723b35ca0eb11c9ebcad0ee89166b35d7a5ec5044e37b51aadcf5331343" name="nspr-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.25.0" rel="2.el7_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
</package>
<package pkgid="a1035fe3c24942723a73fb334c05ca41fa4e03121267674fc60e658954247f2b" name="nspr-debuginfo" arch="i686">
  <version epoch="0" ver="4.32.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
</package>
<package pkgid="d7d6dfd1d882b93110b7cf6e9fca9507fde826d6a565c7d604f1fd2b80443e94" name="nspr-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.32.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
</package>
<package pkgid="a67bb7d70148369fd4dad9a6ce41056335a833836042320906d15611b26eaacd" name="nspr-debuginfo" arch="i686">
  <version epoch="0" ver="4.34.0" rel="3.1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
</package>
<package pkgid="61248c8c756ce53cc959fcaa2a853a73bcc48f8aae381da918a52fb295c63386" name="nspr-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="3.1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
</package>
<package pkgid="da2984b48ebb91725f1f9afb8ee995468f4f50625b905d7dc127a5ea05ed5604" name="nspr-debuginfo" arch="i686">
  <version epoch="0" ver="4.35.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 4.35.0-1" date="1687953600">- Rebase to NSPR 4.35 for firefox 115
- Move from deprecate %patchN format</changelog>
</package>
<package pkgid="491f4a9cb96eeb0ff6b4c8692a17ed04b8e4b36c87ae521314da18279755d984" name="nspr-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.35.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 4.35.0-1" date="1687953600">- Rebase to NSPR 4.35 for firefox 115
- Move from deprecate %patchN format</changelog>
</package>
<package pkgid="6507c37b4da1b796baf87a1fec77fc1de81ee5331590de2fe37adccc6b5125d8" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.25.0" rel="2.el7_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
</package>
<package pkgid="54b6206fe1120ac2dbe09ba19a647690f605f559993afba84c6d4d8ba95d1d4e" name="nspr-devel" arch="x86_64">
  <version epoch="0" ver="4.25.0" rel="2.el7_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
</package>
<package pkgid="8bd50d6af76a82fe859ed728af17ff21234485f44c56f6367e2175c802f457b8" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.32.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
</package>
<package pkgid="e818eab40c25b875d29208fee63ce9ea021ccd4cfc5024c584ebe85331fa3e43" name="nspr-devel" arch="x86_64">
  <version epoch="0" ver="4.32.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
</package>
<package pkgid="0fd0f51398255ff9089d53e189c297601f52d86b823251748add4949e06e6c12" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.34.0" rel="3.1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
</package>
<package pkgid="f0763e1facecaa9cb3d86a1c3cb62ad1f5fd84c17502178c5d8f267cd1af4a3c" name="nspr-devel" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="3.1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
</package>
<package pkgid="e64f390ecbe9935fa4f5b5636748f6668e42bd10f6464b77a3819e4b196273f3" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.35.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 4.35.0-1" date="1687953600">- Rebase to NSPR 4.35 for firefox 115
- Move from deprecate %patchN format</changelog>
</package>
<package pkgid="204f68299aa93469428e5d321f47d38f54e91582cbe43ba063673a05bbb82a20" name="nspr-devel" arch="x86_64">
  <version epoch="0" ver="4.35.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 4.35.0-1" date="1687953600">- Rebase to NSPR 4.35 for firefox 115
- Move from deprecate %patchN format</changelog>
</package>
<package pkgid="6c44f958300236e9bfb998fa36dc6c3e955bbf92131047c2330a83c8ab3f877a" name="nss" arch="i686">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="b7b04ffec5a0b98c2be17074cb8816d1647becaca5f35bbb665037c699d6df21" name="nss" arch="src">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="fb867c626c264b33a0452671dcaf4efb1803f30665e82eff5c51286efe6fb8a4" name="nss" arch="src">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="2dd96ff2f369db67c39d4c3610b812dfac05fce55890d540d6b00c61320401d4" name="nss" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="73dd1323a74f94bfb29c37b1e014a88b9235ece4c60e00a5127606b89e344c99" name="nss" arch="i686">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="1f969a5df76f66fb72519bb8e9062290fc409ba96a15d9660027946bca8407aa" name="nss" arch="src">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="2d12ee236110c74330b17ddce01637cf7cb8dded1a8ec3a20ff7535b8eebbbaf" name="nss" arch="src">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="dc8448e3d9eee2e78b7566d453691b0063fcc139d50760508ceac9ca496462bc" name="nss" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="23fcfbe68caa88a165f4bcc0021b6d42ef329818d0a82231d4bd7085dd701654" name="nss" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="c2f9351bf1ca2359f89d4beff676753af383e37b3d756531e8c31f278955c0c3" name="nss" arch="src">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="a0afd858801e0c77b90838ff306f8c1a7b93d6bf3637086b2b78bb469c8059c4" name="nss" arch="src">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="cc0c7cb428c2c4caf596c5056be063386122bd4243e87128043c9f5ba5e2d0aa" name="nss" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="6e7c212398b39e1b4689ed12a5b9f41008da4e98e40baf8bf392799394aa7e1e" name="nss" arch="i686">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="ca7b968e1a452bcec9014a0c2b9f1f65a6b3d99c9cbf9a715d9905ef4c444904" name="nss" arch="src">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="5559141a4a5488cdb3cd8c8cf14eed2082ef57a708d3d4634e09b9bc785b0034" name="nss" arch="src">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="f0ac9a06043d00961b999c9be3c921a3b7681c80aeff946745308599eda5df12" name="nss" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="ccfee9d7313838d4a1f317b8593ec3158ed623e885a87eac192c10e5ae1365df" name="nss" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="3d5cc18742e1c628483f7f9c89bfd5016d0518b5665ffd32fbf187ca75a31849" name="nss" arch="src">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="1822564a410cb6970c3a55c855a2adbf95b989a72e7743abc937c5a23b745d8d" name="nss" arch="src">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="7c1d4986ef8759afb0718c20315e54c3ab03e062fa174ade1948984a10862e7a" name="nss" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="e20a053e0ff262fa5b93ec2c4cd907af793d3282729c99e899bf8d3d632104fb" name="nss" arch="i686">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="85d588925fc0762abbdb399ef5a4af8dd112cec006d78f1c8db3517884f8a101" name="nss" arch="src">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="58df1c83dd2a3a4c182cc6ca0997d99fafdf5610da73dfe3934001cdfb4177ee" name="nss" arch="src">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="58eee736119f0db26f6a850890b9854ee5680acd73cc11f68dc0ad342e1cb87a" name="nss" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="c9affd1f3f6ee50718867c303a096db5891f01e17859d42017acbfe2c6fcc9a7" name="nss" arch="i686">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="0e0c7f70b144b15d732b859f48f441dea53c167b2d6da59a43aa9c9f8d33e989" name="nss" arch="src">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="9647a192110fe677c773017969907a070e7c16bd49729f7f959efed10d189595" name="nss" arch="src">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="6f75562d031273137fc78325083ba84bed557432b039de240294d1f02369af07" name="nss" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="0558d2ee48a1e4cd6fc0ecd82b80d32c0cb242d34aa80396c11f8a7dce93b535" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="456b7376050614ffd76064fcbb3fea011877b69cf802019e25d99c4a606d3a8e" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="e1e390f4958fafe3beb9857c59894bcc573492343bf303ff1d80aa6c969c50f5" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="4b189b420cc1b37452ddae7078d5b1301620b2d96c279fbb848cfd9bb9a917d0" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="4372398d339cefdc2805c21d429394f0ceb6b96dcd9b93e77f1a6c8ee6f0a944" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="ed70caf93e1bfc8dec3fd8821fa4260828209ea5577e7a21da66cf2277dd29d3" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="97f27a7e00e780b2498c6527f42ee8ddb7e6a7b0fd6ec8a8d2bd56826b68ab80" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="b6fbef6f4d52a3d667242aa88fa4d122dd90aace87502a1639a71837b9814bc8" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="5270e22bc44153e4413864348344996896646304aa92054ae8ddbe700742305a" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="53ea2f453d7bf9fbe956fe2d2cd19e10a84b4c099644266f46408a7c3cc3c6bf" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="de07d77d818cfbb1fd544268924f2322d8063a9e3b3662bfb4bef9b0705fc2e8" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="91266f938df5022a46eaa212fa1827c78939ebff3ba02e2d4a5e34e9394840a3" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="26f0d9972a8f455114f39abdfb7a75c62da7ba6ce1a8df547de1da37e8a82799" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="a5fa4ab28587fdb0028c3b89455da6b6dba6e580021a22889b674b1d169d9026" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="fbec749ea99e477d94fc780fd48fcc571081c30387452290f627f026377ce3c5" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="8aee3c586fb8c6869f2318bf6af9ff2a73706c4e33af0817e4e9aa18c55da569" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="cd8d3c51114647439011724dfdde2d884c8b6afa5101d140c47ecb13f3b15486" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="e9a0018976b0efa6b057f02e816b1c3849fb7f63620fd3ef692add979c2ebfdb" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="a11cc7439a42f98a6efd674e8778e2e4fbe98e1f686577b5f5a67e079a413ea1" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="8c018fa091db06f8d37a8fec6a51563225f9d671cebb8beb22cc2a14b4215e77" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="1c7a5248b40467be523967f7f051f6d3518153359cac1e4fd548214e75787203" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="8e7874ac4ffd93b91b34bbd5b6fc2cee41e7562501389bbb16b174ea12adb85a" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="f1b89f9ecf23733be0c06a8d440160cdfadba0aaa673bd6e8f3cb6200e3fb05a" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="49bff3f31a0cb96dbcaba6fef77f08b3de80e70baa6d972d99c87e8a22313832" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="13f8dc54039eb7062a0dd7198266f96f108f0a1d22c8152ac27d2d477d54cddb" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="d311f8b39dbc9c1c90f9b811e7b1d86ab4225508e77ba368a64239e0292785c7" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="4fcc6d815d773a1b395913a1183a6e714e95aa8fc703375c297a43734602cd16" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="1976b8f873e84783cff1c149cff30a4c94599284d16c345a27e6f0649236fe67" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="f93b0292b466969ab03f9417ec9ef7946ffd37e6ad74be3f5c71cb2f84b7c5ec" name="nss-pem" arch="i686">
  <version epoch="0" ver="1.0.3" rel="7.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-1" date="1485259200">- imported into RHEL-7</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-2" date="1487073600">- explicitly conflict with all nss builds with bundled nss-pem</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-1" date="1488369600">- update to latest upstream bugfix release (#1427917)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-2" date="1488801600">- require at least the version of nss that nss-pem was built against (#1428965)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-3" date="1493121600">- remove implementation of the WaitForSlotEvent callback (#1445384)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-4" date="1493208000">- fix missing prototypes detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5" date="1533729600">- update object ID while reusing a certificate (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-6" date="1547467200">- fix performance regression in libcurl (#1659108)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7" date="1551268800">- reintroduce implementation of the WaitForSlotEvent callback (#1615980)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7.el7_9.1" date="1681300800">- support a scenario where 2 distinct encrypted private keys are used (#2121064)</changelog>
</package>
<package pkgid="a1e44f33837212a2b0d85a9140de4af859fcf67804073f63635d8ec1cb5d312e" name="nss-pem" arch="src">
  <version epoch="0" ver="1.0.3" rel="7.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-1" date="1485259200">- imported into RHEL-7</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-2" date="1487073600">- explicitly conflict with all nss builds with bundled nss-pem</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-1" date="1488369600">- update to latest upstream bugfix release (#1427917)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-2" date="1488801600">- require at least the version of nss that nss-pem was built against (#1428965)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-3" date="1493121600">- remove implementation of the WaitForSlotEvent callback (#1445384)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-4" date="1493208000">- fix missing prototypes detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5" date="1533729600">- update object ID while reusing a certificate (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-6" date="1547467200">- fix performance regression in libcurl (#1659108)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7" date="1551268800">- reintroduce implementation of the WaitForSlotEvent callback (#1615980)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7.el7_9.1" date="1681300800">- support a scenario where 2 distinct encrypted private keys are used (#2121064)</changelog>
</package>
<package pkgid="9439e46790c40041f086ab22ebad26bb00c24f0463314231dc5a4f5f5dad9a94" name="nss-pem" arch="src">
  <version epoch="0" ver="1.0.3" rel="7.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-1" date="1485259200">- imported into RHEL-7</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-2" date="1487073600">- explicitly conflict with all nss builds with bundled nss-pem</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-1" date="1488369600">- update to latest upstream bugfix release (#1427917)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-2" date="1488801600">- require at least the version of nss that nss-pem was built against (#1428965)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-3" date="1493121600">- remove implementation of the WaitForSlotEvent callback (#1445384)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-4" date="1493208000">- fix missing prototypes detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5" date="1533729600">- update object ID while reusing a certificate (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-6" date="1547467200">- fix performance regression in libcurl (#1659108)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7" date="1551268800">- reintroduce implementation of the WaitForSlotEvent callback (#1615980)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7.el7_9.1" date="1681300800">- support a scenario where 2 distinct encrypted private keys are used (#2121064)</changelog>
</package>
<package pkgid="3c521f7dae9a7c3258a4a91351895e80525962187e67084d5df8e05b714812a7" name="nss-pem" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="7.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-1" date="1485259200">- imported into RHEL-7</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-2" date="1487073600">- explicitly conflict with all nss builds with bundled nss-pem</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-1" date="1488369600">- update to latest upstream bugfix release (#1427917)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-2" date="1488801600">- require at least the version of nss that nss-pem was built against (#1428965)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-3" date="1493121600">- remove implementation of the WaitForSlotEvent callback (#1445384)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-4" date="1493208000">- fix missing prototypes detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5" date="1533729600">- update object ID while reusing a certificate (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-6" date="1547467200">- fix performance regression in libcurl (#1659108)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7" date="1551268800">- reintroduce implementation of the WaitForSlotEvent callback (#1615980)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7.el7_9.1" date="1681300800">- support a scenario where 2 distinct encrypted private keys are used (#2121064)</changelog>
</package>
<package pkgid="5fd9acfe9efdb9ff789358bddfa1178b19046e9977fb1067ec252ecdef10d0f9" name="nss-pem-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.3" rel="7.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-1" date="1485259200">- imported into RHEL-7</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-2" date="1487073600">- explicitly conflict with all nss builds with bundled nss-pem</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-1" date="1488369600">- update to latest upstream bugfix release (#1427917)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-2" date="1488801600">- require at least the version of nss that nss-pem was built against (#1428965)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-3" date="1493121600">- remove implementation of the WaitForSlotEvent callback (#1445384)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-4" date="1493208000">- fix missing prototypes detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5" date="1533729600">- update object ID while reusing a certificate (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-6" date="1547467200">- fix performance regression in libcurl (#1659108)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7" date="1551268800">- reintroduce implementation of the WaitForSlotEvent callback (#1615980)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7.el7_9.1" date="1681300800">- support a scenario where 2 distinct encrypted private keys are used (#2121064)</changelog>
</package>
<package pkgid="69659dba7694541a1db85087acb25b136bdbf59c5a2d2d0a1fc810f7262f9001" name="nss-pem-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="7.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-1" date="1485259200">- imported into RHEL-7</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-2" date="1487073600">- explicitly conflict with all nss builds with bundled nss-pem</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-1" date="1488369600">- update to latest upstream bugfix release (#1427917)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-2" date="1488801600">- require at least the version of nss that nss-pem was built against (#1428965)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-3" date="1493121600">- remove implementation of the WaitForSlotEvent callback (#1445384)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-4" date="1493208000">- fix missing prototypes detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5" date="1533729600">- update object ID while reusing a certificate (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-6" date="1547467200">- fix performance regression in libcurl (#1659108)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7" date="1551268800">- reintroduce implementation of the WaitForSlotEvent callback (#1615980)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7.el7_9.1" date="1681300800">- support a scenario where 2 distinct encrypted private keys are used (#2121064)</changelog>
</package>
<package pkgid="fed17870e8aef566ee8236d85dce37b4d06e1f3ac02a6739503c0de15fe99f68" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="40048e7466c4b312eb9d468ecb5f0c6f672bd82581469767c1617ee315ba7c1f" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="35faec80b0e28b177fcf18a195932ee127855444b6549bed0eefa72ed135e0b2" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="e7daa08d7c116396c52b59d33ef262003bcdbc2fb76b0e547cdafd908cb9c840" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="8a8c6970e7b438a6c76e12e7c4727c19e03992012a77a6a2c974bb52f7fcd752" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="dce8d292e4daf5049dafd051bd2b990d768909ea261544bedece8e1f41ef9b5f" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="ccb6d23b170aec6f17f480967dffa6e055a1a49b4857b5fa370fa192c3d23fa7" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="c10dc46ac52824e71e856d28021f3c2a39b5eec1fd98ffd03cfea3062a2dceef" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="7e155b01c7c37ca419c1fda13f623615c4c5fc44277ae6f6087744e36dddeb84" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="36983ff48854c86a6e8f42a8b77ea25e7e2b81f6a0bd6a0ff80265cf18f614c4" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="89d0bbd8d046275ecef2f9204cc513bf88b3f4573acd96d9a1578b28e853410f" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="27db4699b88e1fdb1d6b8f59068019c04087dd60e367543650e242179f1bf8a4" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="3b7370d01748f8b6e5e399a7727c74c24d9e8a533db46bf64ceef6bc21c1cdd9" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="96708b7c766fdefabbb193fcee6ab5e91697d5ff9df7d94b537f89bbae7278f8" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="a6575c626933f6f1d02692300e06c6402ebe7b36205e507790a3c073a622a1ec" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="2d047deee2b7d0eb7a6b2404e1371a8176055acf35d540fb6d38d496d71ce202" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="24618c3c2ae2c56e394538b3447065204a540628b17dfee1c9e080d580de1792" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="ebec2435521332fc358a3a207dfd3a88dc7e4f56056c4ae6470d1cf5f81e3b82" name="nss-softokn" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="d2d0ee464d3fabf4675be5f7d75287538942b34575b3dc4313866037befda17e" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="182f28f6e37fb4298b1301f6da22bb84276ab52d8c71bf971a505b7026a7af54" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="90bba62582baa25f70ff1541462388ed852a198471c15b982dcd9459052a351f" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="3ca8843e1015ec8449e5e5118d7020350ee046d5695d43cfa8e1ae795073fd49" name="nss-softokn" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="3353370a06f1fe84041155b6038002cb16bbece533d16910b238a5dcdd9f42d4" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="6bb28189116015bf3a41ae5d8ee3730ce997fe57c0b853032a0a6e5ecfb25b93" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="2ed28a1e2e31058058c2b914440ba9e6356e1610d5c95ff5f521780726fad136" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="9f7fbbead62f7bf377428575b6becf1d9e7bdd8993b4a3b4bd746899860f4550" name="nss-softokn" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="95429f23043bca3f8451fba10f3457048b4a2882f147c720c398a988c7ccfafd" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="b669ea37c4e3d249b3c37f0f16a02825fba0fe05262e65a81c95168acc59c2bb" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="be9d30f300e11df4ec733a55744320b7c792ed5691026257c24f2d273bbb800f" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="d1d69859e1edec904918a152d27d58834ea50d14136c225b5e565c1834ba0389" name="nss-softokn" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="0e69467cb376cff0879d161295c7033189414863bee906307569db65b931679c" name="nss-softokn-debuginfo" arch="i686">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="37e931e19879f340dd75aed5a6017460c165e0b23f0cf77f993c321609124fe4" name="nss-softokn-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="93d99c388b7f11e4a793accf8d8fbda317778847893fa643ab20b2dc6a8894b2" name="nss-softokn-debuginfo" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="82f1ba4cbd36db96a39cb5e93b8c632fda361cf1a8862021a215cb51c9cbac0b" name="nss-softokn-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="e2ce3e84e4e64f18b5829518a0aecc64a3fdde7e1f69cff46850c786223b3664" name="nss-softokn-debuginfo" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="31dbbb2d18295537508769665b8ecdabe922edd56b5ba595cb9356ad81a88c39" name="nss-softokn-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="7ebc1963693cfc673eadeb6910bfd9ecfa1889a572be32ff57cec5f8cfe24e1f" name="nss-softokn-debuginfo" arch="i686">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="b0637c98257dfb3dda43f24219d607f3fbf4b6780eb62846ef1348e4d17eb8fc" name="nss-softokn-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="b4d36bf4474caaef03ae13c66dbfd17328f32d7a8574a2f48e4157b895a616d3" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="fb4adab71216e7fd1a8a1abe27b709cb74a0e86afe4042a92c4577c2390db1e3" name="nss-softokn-devel" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="c93abd70e5297a8ce0678527000eac112affbcca8899be2bdf74d3f090674e9a" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="8555109d957410c548b80071535eba77dc7542f4dc668cd526c788fd99d7746b" name="nss-softokn-devel" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="3821335693a26b7a9b546eeb7cea7de0d0ecd9cc59f9e13822a1887a4394a345" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="23ccc7662aa7ed7ef15c9aa743fb45d392da5f2693987f711af80ed47c77dff3" name="nss-softokn-devel" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="cc0ad90282d135fca4d97282f4968d16274a7a2849ddb7b264a631bc7b221488" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="06053d818fbd5a57e4703535f64f57a7179ab215438d71668ffa8348c21c488a" name="nss-softokn-devel" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="6d5449c890e8175e5b682c8d015229705c1bea4d6c336d772fb910f20831ab54" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="8d134b7a962ddaed88dba0e8c1b371ca49c54ed824ba01880fee743b1f80264d" name="nss-softokn-freebl" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="7111d5ad2a7933da308f6db5b7b18a65563d2b6aa3f6f359114534ca440c9785" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="d7361a8d0f0ad61527766860cd7a7fbaceed37f8a58b472f53f1d50fd1fbf699" name="nss-softokn-freebl" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="4f7bb56a9ba52caead8b0ab3a725cf45e14c9d218e751bb2e865d735e1fc91e5" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="53bf679e57c57bb977a356c0bf0ac1c505a0d806852dfebe4f52bd817b838ff3" name="nss-softokn-freebl" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="6879923b056ad5677a26222bee9307685475cc8cd8c9775b5ee12fb77b934c7c" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="5730632fdf325208cd10ecc206d9735544c9842eb88d6ffff9a7939b6ba37893" name="nss-softokn-freebl" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="5ab28b0bacf0bba5b73991a7477cf7d82553aaf012a7aac33a79aab920800424" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="4448eb903e5f375173488c50bf4f4682fef0ddc55ceeb8afa77660e871a00831" name="nss-softokn-freebl-devel" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1559736000">- Add pub from priv mechanism</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-6" date="1560859200">- Fix fipstest to use the standard mechanism for TLS 1.2 PRF</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575460801">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn of ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
</package>
<package pkgid="c00680c2358ba553fc125e31d1da1681af0dd811561f2c9dbfbc57df199b54d3" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="5173f84d387c64ee53098a84239e377f1de37c7f8c30e561936dfc5e05ced4c3" name="nss-softokn-freebl-devel" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="93874cadab856bbe2c6f219b559fac3696cbf50e8f4281dc94bbe2a75d5c8f63" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="4a6352f1c1afa71f277f53096f56ae9ebcd084fc118a7759555d13714c1c4044" name="nss-softokn-freebl-devel" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="a5c7912b80c62ab1a91c028e06eb260c50a01d7ae26076d4e10da77ad2241642" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="06979729cff04508779f9bb7ef51537ad3eafa5e2d1110e054fa7f3416899f16" name="nss-softokn-freebl-devel" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="effdb0ac160442c8195f8f965bf3af8e7588960e47edf9b21d0d52e90ff7881f" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="c415f7375158ae5b910a4f167d02649750a6d6197e1d7052f78d9b6fcb76d69d" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="b827966e0fdba0145b0f214c375d6a41ae006654f093c599c752f5d7c161b777" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="36b2f0c0fa4574a5d7b650c8dbf8f32d187043e9f19cfd8c225b6cdf470ac1f5" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="6534dc0851e8910973442aad81b53d2686376beae4205160e96d9f0e7a105ec3" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="02963f04bccfcc427ab02e368a745edb27660a4fb4a22ae4b62ca763ba5fd76e" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="7e56b68c65aafc210d5409698753cd1369d47704166399352cfc3db900a9a4de" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="9f13dc2deca881e49d0603b5401ac581f7039dad880ee64edb1306cd3b24c508" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="5ca2ac0f36ae7f3eefcb00cf97579d5ddf7dff7cfe79770370f4fee3e14073aa" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="898d5ede3c6a85d260cc54b217ee70fc9a99951239d8a1d8df7781bc12183df8" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="3c050608e64f806b30895278f3f7863b508b14701b9719d07457fb37139e63ed" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="c4f467c91a7d141d5ff1e483e95478f1cf9d9ca0be4b8cd9bb5ffb81c8f3f5a2" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="03442c734e3648f633d4ce3c2287608507b4a95ab92c8bf0d0cc2ec198ef9ba4" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="c3b99fcdaa6862611cc6aea5a1af9e96a1df4942dce407f095a739e8a7861989" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="792e3bd3e574ef913bbed0d0088d4f9973099b1dec46a918234b92409374006f" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="7f1e7824311a2debec0e88694e3b2d9c29b50ee5f5465bb5bb77200181c98bcd" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1559736000">- Fix certutil man page
- Fix extracting a public key from a private key for dh, ec, and dsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1565784000">- Fix pkix name constraints processing to only process the common name if the
  certusage you are checking is IPSEC or SSL Server.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Tuomo Soini &lt;tis@foobar.fi&gt; - 3.53.1-3" date="1601640000">- Fix tests by updating PayPalEE.cert to valid one
- Fix tests to expect small primes failing rhbz#1884793
- Fix Cannot compile code with nss headers and -Werror=strict-prototypes
  rhbz#1885321</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 3.53.1-3" date="1604577600">- much thanks to both Tuomo Soini (foobar.fi) and Pat Riehecky (scientificlinux.org)
  for finding the fix to these issues</changelog>
</package>
<package pkgid="0bd33d41c296affae9b8a626d4918b34f8aa58c54eeda2b643b2cb409c4ba25a" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="3ecc089894a549978afd47f17280cd68d7d9faa65bf3d6606f1177f4ec30c9bc" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="147f501a3f11ba5b28b75cc35176c347e0234bd46f3fcbb67feb4f428d7e5305" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="d1c87c6258dba59bff7f5ed68b492fc44534166b9f8c6b1b49a779112e20a6f5" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="608eb180cfb45b4dcd30974766beeec4798b67906cc44c0b4380b614faa64c83" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="6a22fe11009e743f84f438fbaec1413d51c604b20c76e8d5076d688c37d8c491" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="3112f03e50731634cca0c701288da5ff7e43062f951ad21e863f7f783138a596" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="2cd429fe7594ee49a2e3f0c68579fdfcad16c7dc8c8c0d23b0f3912d257f709b" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="243d16faf409e8d99b6d90669589914b75eaad9d3c6db9567848f850c9778b69" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="962ed0a453d881416d72ac6f8a58b07f8164b4a2a260bf2ce76cafa4836af11e" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="09bc98b5e70550a63da8efe934b5916eb32d7f95d0baa347ebb007e28c6b58c9" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="21c70af48ccda5d61bd6ba79a02f115b33f3917e3ab684be7bdb4aef1a516ba0" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="a54e2234e569b47ee9f498fd8cbb8a3501cf5a1c1d9617c68fde31af04d36a53" name="nss-util" arch="i686">
  <version epoch="0" ver="3.53.1" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
</package>
<package pkgid="bc151dd3e0072fd7a09b9731bff96f87e1b5da17f6edf3e1fc83d09ec0acb2db" name="nss-util" arch="src">
  <version epoch="0" ver="3.53.1" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
</package>
<package pkgid="bb3ca818fef3294a515ac0ed88277d3a43a7e9f057b5e6826aaa09e1af73e868" name="nss-util" arch="src">
  <version epoch="0" ver="3.53.1" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
</package>
<package pkgid="045dbe3d5f41bb0a19500184be96d648f83d7ef81caa52a611a4d6855b4fad18" name="nss-util" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
</package>
<package pkgid="98412143fe34ffa1e563a4067c93d859933534192ab474546f6704f0aba1bcc7" name="nss-util" arch="i686">
  <version epoch="0" ver="3.67.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
</package>
<package pkgid="9887233e9263926c364323757bcbfa623fb3c70c7e70c4d33e6c61ee711ac7f4" name="nss-util" arch="src">
  <version epoch="0" ver="3.67.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
</package>
<package pkgid="c9d8e8f31419b2e92bc8d6239aa9b8f0245f598617e764b79aa4fc8ba0069431" name="nss-util" arch="src">
  <version epoch="0" ver="3.67.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
</package>
<package pkgid="25248030095c93e04eed668e7bed4d706d9f455ac3ccaa7d32cadd9aa12b762a" name="nss-util" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
</package>
<package pkgid="b4d69b9caa658da12410b6f3ec8674b1a355f1b9fe9ce560c025d3cd0f69c70e" name="nss-util" arch="i686">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="a32f5f8e6454977100d2fafa4b35771a47e8a771f0991c9ad9d0d055018640cd" name="nss-util" arch="i686">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="3f414a870b42af2014a237cfc736159b06eefea1b366675e007677a8170182e4" name="nss-util" arch="src">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="53255acaf5c2f0964eaaa4b8f6276764e81f6557621b10acbd1a8a916ea4b57e" name="nss-util" arch="src">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="35a32031ce57c56ba0a984087f5996f81cac8fcf617094b62f2c7efc176853a0" name="nss-util" arch="src">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="e983175401a2c72588048eaeccfc47a1f00f4d61c592d1ee5c230d0089cc3ed9" name="nss-util" arch="src">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="b2cac9722ef736ceab2a42e77207885eb737a3fa0f14c43972b697f0aacd45d2" name="nss-util" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="80c67a26914232e68b0732579be0d38b4db62253ca4df2114653e2ac98c54f4b" name="nss-util" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="bab1d4a4220f76a89392b74805fd11724396cdf3d016765a4e507d31cc03816a" name="nss-util" arch="i686">
  <version epoch="0" ver="3.90.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90
- Replace deprecate %patchN syntax</changelog>
</package>
<package pkgid="bf7bbd3063496112cc5f3717998c370f0d9500747374b787057b4e0db0f3dd4a" name="nss-util" arch="src">
  <version epoch="0" ver="3.90.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90
- Replace deprecate %patchN syntax</changelog>
</package>
<package pkgid="f855470994bd408a8562cf9b1af151308ae091218bebae85157a265ad1dd049d" name="nss-util" arch="src">
  <version epoch="0" ver="3.90.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90
- Replace deprecate %patchN syntax</changelog>
</package>
<package pkgid="a30a4b32ef297e8583a5b9656ae55a5724cfb9abf3d92389de5f422b0b2754bf" name="nss-util" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90
- Replace deprecate %patchN syntax</changelog>
</package>
<package pkgid="3ef4a671d8161d8e751e0a84ea9ec85be363190074c58ffb9d499251d372baa2" name="nss-util-debuginfo" arch="i686">
  <version epoch="0" ver="3.53.1" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
</package>
<package pkgid="53ee7656fff1855c7a81c5b294a41d84dc4136caab2669cd205ae866e1f2fe91" name="nss-util-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
</package>
<package pkgid="fa810b1b0c68058585e95ed73c70a888ea2f00e7e5343a5dca841aca15224cb0" name="nss-util-debuginfo" arch="i686">
  <version epoch="0" ver="3.67.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
</package>
<package pkgid="7a11ecf7d260a9347af0845dc0cc08e5a9d2b0f381827b977026f740d41d1559" name="nss-util-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
</package>
<package pkgid="14440216d4154e7d1848202bbf58f2b6154722ed176d7fb92992314f0165775a" name="nss-util-debuginfo" arch="i686">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="2a9f8742304e2bb8d72e3cca654e531a50d50b1681b6702ced6599c1fef118e5" name="nss-util-debuginfo" arch="i686">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="7703f8d63e2c8927e7826dd4e62ca173aee6666cb4665c12b6d6a747bdc325ee" name="nss-util-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="98c10148d7105efc4d8eaaa801c62d4402204d73ef69d619e611e56b5315fbb5" name="nss-util-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="5a49c34c895342246711001b372e27e94bd6a0f266772e415e822e3d46f6d8c9" name="nss-util-debuginfo" arch="i686">
  <version epoch="0" ver="3.90.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90
- Replace deprecate %patchN syntax</changelog>
</package>
<package pkgid="9006de8ddc8b33774ad475f2725a4248a4b59611db9f4a5648b9fbcdcc00b5d8" name="nss-util-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90
- Replace deprecate %patchN syntax</changelog>
</package>
<package pkgid="1d93e443e238e5501e1cc0b4fa6da0dbe5b6b946def3a867d3108c7b13cf2289" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.53.1" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
</package>
<package pkgid="61c3385b1bdfc8fc21e0d47a9b8c0000a0a9b135dc276200f56a427468fb4642" name="nss-util-devel" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
</package>
<package pkgid="5ba5d6f3c9791ce9906a5293dfc29810601e1035cfe4c70d397c4f5559d4f08c" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.67.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
</package>
<package pkgid="caf2dea3ab4ce44c91a7b58a50e8d0525e346e0b2c1fd178a2ee4e7f0b12b6be" name="nss-util-devel" arch="x86_64">
  <version epoch="0" ver="3.67.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
</package>
<package pkgid="ae4db3df717d55418dbaec62085f631c70697b8a5d91c5b8dfd90c03106c32a7" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="d16237dbfbc865fe21d5977eac64b76d5d31a9ed3b48cf42c82af87cbfb41420" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="5733272cc0ceb6e2db67f38fb6f7b289a1a9ccd13bc8f44866af41f14a955357" name="nss-util-devel" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="d0864b80d847e943435233e160e8cc445f0cb504b33857cc2447e0e0111b7244" name="nss-util-devel" arch="x86_64">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="1a23ed6ed36197ef716c4c5877feef2fb499dc19662351577317af4fb0d9b004" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.90.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90
- Replace deprecate %patchN syntax</changelog>
</package>
<package pkgid="e54c40023da2c4df6128a6f708b9c1b00a9fcafd70ad1c738173ed5fb15181f4" name="nss-util-devel" arch="x86_64">
  <version epoch="0" ver="3.90.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90
- Replace deprecate %patchN syntax</changelog>
</package>
<package pkgid="80496a8aea76d86a087e1e33421353f9ae54df1c0281adc4ef05052f40367f46" name="ocaml-hivex" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="94b865f3cb2d8984b5f3c9a9861393d8a2ec4fae84250be0a236b972f319c85a" name="ocaml-hivex" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="03362eb76e5eb248bcd32f0797d4bcf6f2285735e18f3f706392f190257b6a2c" name="ocaml-hivex" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="c31b75c8530d48549d25adc27cd0c5f3c0e6d840655c223b49a95ccaeafeed00" name="ocaml-hivex" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="0d70ae193f46cb073663500d6944088575e5a3b163b04cd4341a896b62825a10" name="ocaml-hivex-devel" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="88166c326be3abc1a2aa05d9e48fb34284c484470eb75c355304fefa1c7f158e" name="ocaml-hivex-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="a29b1182dabe334e63c0eeec889ed812174de0e51968c1ff247584b39baf7489" name="ocaml-hivex-devel" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="94cb7c40ef3edee89b34aee0674c99f9edb7e2e6684179e78c69c1b4e10cb423" name="ocaml-hivex-devel" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="351381bd0b64385ee4e0ece8a96f879410560704b65f12485962dcf5b44a72b2" name="open-vm-tools" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="2bbcdface73566289585b8a765bd3447828be9c68637b7c2a7232fe9c44c1ab6" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="104b0d26235fee06eb196442652f00935839d96b8ee3f7edbe42137591050e13" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="186d6c4279a661af48833778d7752bb4f86d02a207991e4267989d52a9008dc5" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="385ed2ff321946d46efd0369e3c859af53a8f021b04360e449922465fcca4683" name="open-vm-tools" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="5f68972ad90a380fd5ae4f2ddb5da4d98da0d4b6a681c999c5f56132df21cca4" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="96620cee100628ad69c5405d730794661d49aeb7891ec1e90c545737ccceb207" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="cdad8a2b5141e58bd353a56ef140bd9706c1cdd1296093af11624a97feab2a9d" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="179468f8f3dd49a15518eca6de391ed839365786d7bc3fe36f8af3e78b0909ba" name="open-vm-tools" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="aa6e77138c4c968f9d04c6a976c96e00369fd2fdf1605ac4cccc851a58397b4e" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="d2ce278f17a5ab7c2b87971e89b0b642d19ee50b3bf926e7c05a88620355439d" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="4ad481a6ba596a227d9c1a4834092ef87cdc08c04b90a028b1d377ec7f869485" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="264225516d3b13c5cbfe3a021f6f977777c63ce1ece1116277709e3928667bb0" name="open-vm-tools" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="dfdc5d18b9c99143926866c4fb339d4e051c86979568486870a78aa1ee2ed7eb" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="a7031444751c8bb491e28033b1e1abc196ca64da8becf32d7d45f7a45358f5aa" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="db3f2027b0a7b564ed4317a5aa7ee31aeb0dfebdcdbb61428a4850f2191cfe39" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="e3451f84ae226a994853e9488bd09660a3635151ef2f11e206d3b5d05aa17641" name="open-vm-tools" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="f85099b66a6601e8567beba8c2570e3d1248c22a5abe6054d70330958fbcb463" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="d0a76f0f0b55414162b708a98bf3631f10a16fdf784e4419a89071b951102521" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="08fdab946d74ee8ab7148d9c04945037c3dad4a81cb2fa130867e0d258bf3c28" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="cce6b8e719c72e27157dd82f0ef65d764b32d61cb78a068fd6d9e66f48982301" name="open-vm-tools" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="037b335bf4ea3d6173c1efe04420b5970fc29e0407eeefce669eefafe9110234" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="b8ebf026fa9846add1bf49c0eba74300aeb52cc26ebde8ce6f48745f48f7aedd" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="d8131b465474d44fb3bababf100931eea1dadb056d1112312e5b665b4267b9b8" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="db237e01da68f852158e5df602decf5ab6e558c3fc3782a22e7555be7ec93875" name="open-vm-tools" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="d403eaaf089f4f34b72fe6a2baffeb392448183d6cf5288f1843643389b8aaa9" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="e56ddffe12022a9721887c7fce231827262e1ee732cfdba083ee5ee2e52e88df" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="dd3a1a81496a873b917e6b11f2f8880bc920c4f296b034d8b35dd202eb6f6953" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="2eb81eab95a7a544dbfb678de9096bbc306b1de3e4bfbed10f7d5fd82afd20bc" name="open-vm-tools-debuginfo" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="9d8d8bc9a45536b8fb5bd961068064824712aa91d1a02d9606401c6d323a98ce" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="0806e6c633487295a1655a2218e4a924f9f7ba35de2128cf5c85d76b2575cd1b" name="open-vm-tools-debuginfo" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="387e554a90018e361770706c29178dac44b2eb8b891b436c9c9a93c6a7316661" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="4a4d5c1bad06ed288591146f7b9010d3dd7aa3787861cc526da8e435ee69149d" name="open-vm-tools-debuginfo" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="ce32779530f328682bc112e25bad895f8e69e9e31b494d90697a154de39b81cd" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="6cddb3f1bd05f764cb67f5a0a20a49982cdb6407e69a2ebe3368b955c6d17e64" name="open-vm-tools-debuginfo" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="fb1081289682aeb9a5605ab124c227f715c7e1062b22eecd0b87a07e31ed2ce1" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="889850fe78eaaa9baf4ea1f2ec78d11f6a8b048c753d3b88447115e26797bc2d" name="open-vm-tools-debuginfo" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="67fc99c75ba8f4b63d38301508b2b9da4bf4b5d95889bd13dc37a1e165438c87" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="d0ea380830a35b72d9af820e8b8421524653d363c16739c1734f5198f7141a42" name="open-vm-tools-debuginfo" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="3d579256934e6270cd595f9a98aa62e79aa12298bebfff06a9bd57f931269c71" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="f6e6b26278188dc91efa1650fd573a1adcd2ac7013e4adccb7b555da08d2510c" name="open-vm-tools-debuginfo" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="36a52cbd0e182f241bbd1080bb768a48529ed514c6aac10a0b0e5b5d402d0df5" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="ffc78ddf74bf51308fc8eb2e89d8046d796fd3cf332de47b08c7b0360bd77f3f" name="open-vm-tools-desktop" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="c0a40220bc3d3bb612a4b92ca1c633c3abd52eee49c88c83db5ea98e149eff3a" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="c0cb71507ed34718ee3474d90525d1c6b1763d88228408a0e42ee9f9f9c6fb41" name="open-vm-tools-desktop" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="c81558a98309851f1959559b00e1f2ef439190aef738101992c0cf9dd0f65217" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="8db07199f12fe6c44e819dba18f167809e4237752812bfb94d30589aaff8d313" name="open-vm-tools-desktop" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="6cb1bd8e9e1a2a414ebe277402776f58348f98e3e3837c7b049bdb3426db2bfc" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="d605642ba140e278e1d9360dcb50ba499c010fbca974feb81547adbcdfd60ca7" name="open-vm-tools-desktop" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="5589b76451ad00e0e609cf8bec33b46e03da361694bb08878537f022ed3b9776" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="addf810910b5ec45aeffb0164f568fa8212996e6b3500ef4c34f7446f5edec71" name="open-vm-tools-desktop" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="a036017f37513674bea003d5ad1f50f86e44399c2cc0928858e99ed4eda47aee" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="c5dcf42f3ba47f378b4384e6a172da0c5bada7c90fabdf7136a74216f43bf2a5" name="open-vm-tools-desktop" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="d8fde6ce4e577da558c10de29dde662f6c3f77b1d41b10f4a40a2b23def2f351" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="5f33f905982da3947f6f52c65ba16e06d4e6542a273d5eb65773c31538015a96" name="open-vm-tools-desktop" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="da365f94af35ce15fd3e0b396d6a5b91d94cd974cb6e183d6c994ac7b5cf371b" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="e65caace2c391062715aee8e696d6b110fd308b4a71865d3e4100647babed9be" name="open-vm-tools-devel" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="729db5ceed7727f10d23dbdb51b42b2ae43da88c9c8b5d4d9a587417f8545a20" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="9cd7228f59865af9d77b16167910999c08a2c0000b646ac65cfa0fd882000ea3" name="open-vm-tools-devel" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="1cb9eb018c7bae96ab625d19e968e723ee7d8f52683f6c618eb4b748d4dd2f62" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="10b637cd3665905b4aa64dfd91c2226103d83a4878d9d888a9e80f2406dcdf07" name="open-vm-tools-devel" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="2aef99f6c92e49fb30692b834160c3ebab628e4b4e93629790538400840b4f73" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="5939d516ffe2350496404c4e05f480759c8065921d9f9d2462e764a9768b1ff8" name="open-vm-tools-devel" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="8527f0ea3158a2748d589285fdbe07e3c61a9a411e8d71b5180d33ff50c31326" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="21b5e54d6d416d583209764d39c9a1fc167c38d73cac8293db98c755e7a98702" name="open-vm-tools-devel" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="731653562cde2ab8f237acbb9484cbdb3347e54f5c363f9f2ffb60f7412181ca" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="e869d0a5e2b0cd4a95c23d2c094ac6bd97c17a31ab7f3d5c054da6ea5a04794f" name="open-vm-tools-devel" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="8ac4290fffc56dd66d9a37b2969db8af8de88adedb690eccc51f5687de4ef8af" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="a0584c05fdf5c84327f9840a2303ef8685533c37efe6a93fb5c04b476300d383" name="open-vm-tools-devel" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="41c026e908233932c2d2e08c3a18633c421c3b3c091b160ef701c41019601561" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="3272b5101da4a733dbe42360b661eddea57c6b1c000692ef463f87e68dd39ca7" name="open-vm-tools-test" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="560ebf0566acdfc7f9aae34c322d826603a755de2a68263d8d6c4c55b02c95fe" name="open-vm-tools-test" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="559fc9a43b90806a9ba0037aef95dff50cb45979e445b4b4a595a9900a66aabf" name="open-vm-tools-test" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="22a6eb86cb904061a3df7b4789ec7407b2c7c920a8b1b0098ff09e29628a89ea" name="open-vm-tools-test" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="44f72c707cd17bcca3ec92a832347ec35a2b26e2fb053fb204ee7ec8535c745c" name="open-vm-tools-test" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="034e4160488279af65c7c407f260753c72822c7c298736672f02af4732145635" name="open-vm-tools-test" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="75dcb373a565ddd879b6477c2a80ad194a129ee1a326d6d18a75d08522fd0c48" name="open-vm-tools-test" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="ced488ccb91f45fa15c3ddabfeea497cb55b851a9660badacf38fef7e13999ef" name="open-vm-tools-test" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="db15487e73890fb3d5ce1eb6d483e0f09bbbed4f577a37799f5495cac85b0125" name="open-vm-tools-test" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="c67dce42924385235675ab3f03f5278a5fc3e80e04bfb0108ba1e5b10fd38d93" name="open-vm-tools-test" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="56061d51c88d08c5e2db1d8ceb814da969c50b17cdde08ed99ab5adf19282ec1" name="open-vm-tools-test" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="c68f31942434d6e69d900e3f65c7c1e4548293eaae661293ca7568c33192a76e" name="open-vm-tools-test" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="14b8271d7029061a3c652c803f478a2f50f3d8e5a4e7f9f2a5149dc2c8bee922" name="open-vm-tools-test" arch="i686">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="72b24a87d854615563d483383da54111fa630083380e2e233f6453f22a893ccd" name="open-vm-tools-test" arch="x86_64">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="db99e466ee4558078ac2152b95defcec0b6b349357cb46606cadb4458d1450d3" name="opencryptoki" arch="i686">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="cdc26b72b3349a28c6275a9499bc4608a2f6505437938f7f6cea82110e6afa47" name="opencryptoki" arch="src">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="c5c90c6a5e24bf516e5f753ffd83f636b924c85045a4792def450f1b590ec55a" name="opencryptoki" arch="src">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="b27a48f99ec7f4913c0b49d4967eac8dab972072ae087c3217b1988bd160b352" name="opencryptoki" arch="x86_64">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="c5620b6aa220eb1875468f1256f766e6283967cfa569967be88ffd56b0926c81" name="opencryptoki-debuginfo" arch="i686">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="4afdc933c884f3775a31ece260d67fb5b6b3eddbf6906caf1eefa7e5298c1c43" name="opencryptoki-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="7f726c5c03369a9ac7096bd61d4707f2734678785c0368754a3ae5e955ae524c" name="opencryptoki-devel" arch="i686">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="1629ad4960f87917f36d27de3821161d76219aba82bd4f5e939c2f192169e609" name="opencryptoki-devel" arch="x86_64">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="e16472b8d57d09bb34b127f692d1644429bbc269f28bfe9adad8aee876855b58" name="opencryptoki-icsftok" arch="i686">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="93f63525459389bcd4b82fcdcfb167c0c7383d1dcce3663e85baea4553a94d9d" name="opencryptoki-icsftok" arch="x86_64">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="dd0b853c35c89f3e8363b2c6ddb7b89a60d87a6bdfcfd2f6957e6cc0a088872d" name="opencryptoki-libs" arch="i686">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="0f0e1aa7e95b4ec528617b3fd8d1f75c0294f1a9c99f9ecfc86c1837ef220242" name="opencryptoki-libs" arch="x86_64">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="8c8337b042685fc6c285676ed21f85409f6027dd9da8d05e22875af529698474" name="opencryptoki-swtok" arch="i686">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="0a6240606cc65ab14ae9727060f41c104396050b591a5c3da830b908ed63a950" name="opencryptoki-swtok" arch="x86_64">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="cd68d383b08cf33dd152d4b3ed9d786f0bf2ed314dcd2ad412d6f235c03a8455" name="opencryptoki-tpmtok" arch="i686">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="465521ba621393322109d8e8a8d123d9f341badacfb88201c80629cccb6db90f" name="opencryptoki-tpmtok" arch="x86_64">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="aeb0ac1eef83a4f9275f099084f3566c404645a3b5aadd463c0686be472325de" name="openldap" arch="i686">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="d11fb49f88e620020c375e6ea36b69df79949cd288883451104c405764bcd227" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="a34be7edbfe1b648a41cd0f2953c954463c684125b738428ac304fbb262dad55" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="240f8f1bba8110402d3bda069f63766186480194e788bbfa66ccf013c388588f" name="openldap" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="3922650c2494c8eaaf59efd191ee0af6db23f02963b15b8877947a00de9c0fb5" name="openldap" arch="i686">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="75ea94cfa0817f80e9f3eb7e4ff0c1448f278e8632b03299f1251fa05187e4b8" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="72a4c2f333e1ff39f891db9e7149c772837dc9d71d79f5854bc0885923b26536" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="a08fe441aea46940ff53c8a6c8b66614e2f65cb8d35a0904fe4c4a0eaeb32388" name="openldap" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="5cc2579d1cf6915a3c3deaed8a6a78b340165184d7cc1e5fd48fb7accff5e14f" name="openldap" arch="i686">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="acfc75cf5b0a4c8c051f369464cf530d947d9b55d1d4a08909a87e3a7591492b" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="4775735e60c62d7987e19a0036e50e072e47893d6485216847e91eebe3751c07" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="d49f604a634c440d0c41442416684edd44038b6b11cc683acb762906753861c2" name="openldap" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="40fd4ba4e5044dc2d221eed19d7db5378e823ea60d418abb28f20d3b6861a098" name="openldap-clients" arch="i686">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="e17926547b3ab65183d2cbcbf1762c9141f885d9cd1af522115fa910f7578941" name="openldap-clients" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="6ee076af5d659b82d2b8a7f0b07a0e74a790548455d2a4e05bdeb8b3a13124e9" name="openldap-clients" arch="i686">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="14228eefbaf7160a266aaed41ede89ed8cb71b034f3b75213294f3e2a2ae80b7" name="openldap-clients" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="cd25efb5c2d9af678d70e77d218d7424d95b5fa5fcf62bd6fc7e466823b7788d" name="openldap-clients" arch="i686">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="cf45eb591b483564c9cb41f722eaadbe497397d9e22fb97f8f72365e4f398ab3" name="openldap-clients" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="715818220612ec932b87cb5bf9ddfdfd3287bc0d4403dc57928dd0437f0325ff" name="openldap-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="2e58d5d18df1ba3a21ce9cc5fcb5444f35548d50cc987ceae1229e02b7d812e4" name="openldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="23b2601d6fea52452cbcff5fd46345956a3fab7dc0afa681759d332a92bf35ec" name="openldap-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="16489ba1396ebe87cd7cdef53cac4e4ab5c4749097abcd8d35011e9e49191dc1" name="openldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="c6ac7a6c4e5637b4cba97c5e99171775c99ac4e6513568f0df4647760e76ba6d" name="openldap-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="6203051aad3c8222b5df673b68aeed0ed70698a85f4110c76b129ef2f4cf1663" name="openldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="a390df66a699f09d383b9fdeba68debe00c2e7859170adf706b86aaf0e393e28" name="openldap-devel" arch="i686">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="303c98799a04f932298cce97f575cd3d9a9516f257702860571419cff613930c" name="openldap-devel" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="06bf4020574ef018086dee0c961057442a0f3cc4370e91b19733cdbd4f349fc0" name="openldap-devel" arch="i686">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="b9e2be1d93e63f6edc4c7798b477c4b5e03eff230bd06cfc1d0628e1fdc79357" name="openldap-devel" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="c49c082efa29908350ff22484871bbcad8b13da41320aff83474110abdf76d51" name="openldap-devel" arch="i686">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="fb737175799669cba94a703241a4583cb71b5537e668bcf86d0415784f417912" name="openldap-devel" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="47bc89e8c983df20bb2821ff1f6df6bf5e36928f98c1650c7eeec6beb26d68d6" name="openldap-servers" arch="i686">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="4390b873b5e993a1812dcb41435bc8a192cbeb529b9bc4469bde27d467636ed8" name="openldap-servers" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="d136792124318bfe8005730402af64093c37483e3c85d384d006fd1e550694f9" name="openldap-servers" arch="i686">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="c7c14cb40ebad6e1f23db90a6cfe8d47e277e9a5b90510033ee2b76918be7d3e" name="openldap-servers" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="7fddac16fff3bd84bd34dea09ae668c7ed9bd8a0d68bdc958e206cb5208040f4" name="openldap-servers" arch="i686">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="011e8f4f25e4007e1c3f68f1de9b07f6c3ce2ec6cc632103dc8f178954fea065" name="openldap-servers" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="4e17266e3e39b07166b4d351707ccc59bc448e3c9bd9ea6073f70904f625125a" name="openldap-servers-sql" arch="i686">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="1774c1af4ac53032d6462919fe00c7054ed6f4d5fea9e7fe270d602834ae81b5" name="openldap-servers-sql" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="a3f14cbd9497f4878cf2412a7f22f90f2ca7d7983c03c522e301aa2af333ca83" name="openldap-servers-sql" arch="i686">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="7c111813688e282fb6867b26a3701ec4b3834595796c700cd93bc3c89e3cbb06" name="openldap-servers-sql" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="5c1cc8502ad993dd2cfdd4c04c4e0db1daa6c0359feb1cf65a04d1da5cfd73ba" name="openldap-servers-sql" arch="i686">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="639ab15cc2e1c02852b95113190b1ad869a45751919f5aba838c4e202bbc6e97" name="openldap-servers-sql" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="eaae6e4404527c601d902a36947f682017b8d0f3a4a1fe7f5d7b52b0587daece" name="opensc" arch="i686">
  <version epoch="0" ver="0.19.0" rel="4.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-5.20170227git" date="1495108800">- Add missing pkcs11-switch script</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-6.20170227git" date="1509710400">- Use label from certificate DN if there is none (#1448555)
- Use Cardholder name in the token label (#1449740)
- Avoid infinite loop when reading CAC cards (#1473335)
- Workaround for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-7.20170227git" date="1510056000">- Fix issues reported by Coverity
- Use upstream accepted fix for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-8.20170227git" date="1514980800">- Copy labels from certificate (#1448555)
- Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
- Properly parse Simple TLV structures in CAC driver (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-9.20170227git" date="1529409600">- make ECPoint behavior standards compliant by default (#1562572)
- allow mechanism to be specified in hexadecimal (#1562572)
- Disable pinpad by default (#1547117, #1547744)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-10.20170227git" date="1530619200">- Improve support for ECC-enabled CardOS 5.3 card (#1562277)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-1" date="1549540800">- Rebase to new upstream release (#1656791)
  - Add Support for HID Crescendo 144K (#1612372)
  - Add Support for CAC Alt tokens (#1645581)
  - Fix usage detection from certificates (#1672898)
  - Fix security issues:
    - CVE-2018-16391
    - CVE-2018-16392
    - CVE-2018-16393
    - CVE-2018-16418
    - CVE-2018-16419
    - CVE-2018-16420
    - CVE-2018-16421
    - CVE-2018-16422
    - CVE-2018-16423
    - CVE-2018-16426
    - CVE-2018-16427</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-2" date="1553688000">- Make OpenSC multilib again by moving the conflicting files on ix86 arch</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-3" date="1553688001">- Make OpenSC multilib also on s390 and ppc arches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-4" date="1605268800">- Support PIN change for HID Alt tokens (#1893856)</changelog>
</package>
<package pkgid="5373f97457abe8a02af347a5cae38ba5ecdbc3288299b8263b55a60dc5ea9f3b" name="opensc" arch="src">
  <version epoch="0" ver="0.19.0" rel="4.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-5.20170227git" date="1495108800">- Add missing pkcs11-switch script</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-6.20170227git" date="1509710400">- Use label from certificate DN if there is none (#1448555)
- Use Cardholder name in the token label (#1449740)
- Avoid infinite loop when reading CAC cards (#1473335)
- Workaround for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-7.20170227git" date="1510056000">- Fix issues reported by Coverity
- Use upstream accepted fix for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-8.20170227git" date="1514980800">- Copy labels from certificate (#1448555)
- Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
- Properly parse Simple TLV structures in CAC driver (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-9.20170227git" date="1529409600">- make ECPoint behavior standards compliant by default (#1562572)
- allow mechanism to be specified in hexadecimal (#1562572)
- Disable pinpad by default (#1547117, #1547744)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-10.20170227git" date="1530619200">- Improve support for ECC-enabled CardOS 5.3 card (#1562277)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-1" date="1549540800">- Rebase to new upstream release (#1656791)
  - Add Support for HID Crescendo 144K (#1612372)
  - Add Support for CAC Alt tokens (#1645581)
  - Fix usage detection from certificates (#1672898)
  - Fix security issues:
    - CVE-2018-16391
    - CVE-2018-16392
    - CVE-2018-16393
    - CVE-2018-16418
    - CVE-2018-16419
    - CVE-2018-16420
    - CVE-2018-16421
    - CVE-2018-16422
    - CVE-2018-16423
    - CVE-2018-16426
    - CVE-2018-16427</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-2" date="1553688000">- Make OpenSC multilib again by moving the conflicting files on ix86 arch</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-3" date="1553688001">- Make OpenSC multilib also on s390 and ppc arches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-4" date="1605268800">- Support PIN change for HID Alt tokens (#1893856)</changelog>
</package>
<package pkgid="803356b4ab544bd34bb1741590bea133e5bde57e4ee4fbfa43404623db76a9ea" name="opensc" arch="src">
  <version epoch="0" ver="0.19.0" rel="4.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-5.20170227git" date="1495108800">- Add missing pkcs11-switch script</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-6.20170227git" date="1509710400">- Use label from certificate DN if there is none (#1448555)
- Use Cardholder name in the token label (#1449740)
- Avoid infinite loop when reading CAC cards (#1473335)
- Workaround for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-7.20170227git" date="1510056000">- Fix issues reported by Coverity
- Use upstream accepted fix for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-8.20170227git" date="1514980800">- Copy labels from certificate (#1448555)
- Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
- Properly parse Simple TLV structures in CAC driver (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-9.20170227git" date="1529409600">- make ECPoint behavior standards compliant by default (#1562572)
- allow mechanism to be specified in hexadecimal (#1562572)
- Disable pinpad by default (#1547117, #1547744)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-10.20170227git" date="1530619200">- Improve support for ECC-enabled CardOS 5.3 card (#1562277)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-1" date="1549540800">- Rebase to new upstream release (#1656791)
  - Add Support for HID Crescendo 144K (#1612372)
  - Add Support for CAC Alt tokens (#1645581)
  - Fix usage detection from certificates (#1672898)
  - Fix security issues:
    - CVE-2018-16391
    - CVE-2018-16392
    - CVE-2018-16393
    - CVE-2018-16418
    - CVE-2018-16419
    - CVE-2018-16420
    - CVE-2018-16421
    - CVE-2018-16422
    - CVE-2018-16423
    - CVE-2018-16426
    - CVE-2018-16427</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-2" date="1553688000">- Make OpenSC multilib again by moving the conflicting files on ix86 arch</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-3" date="1553688001">- Make OpenSC multilib also on s390 and ppc arches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-4" date="1605268800">- Support PIN change for HID Alt tokens (#1893856)</changelog>
</package>
<package pkgid="294c73d7dec931bc6897d083aa2406c19fd81845c0ab10a5fd2ffdf24a2a53b5" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.19.0" rel="4.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-5.20170227git" date="1495108800">- Add missing pkcs11-switch script</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-6.20170227git" date="1509710400">- Use label from certificate DN if there is none (#1448555)
- Use Cardholder name in the token label (#1449740)
- Avoid infinite loop when reading CAC cards (#1473335)
- Workaround for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-7.20170227git" date="1510056000">- Fix issues reported by Coverity
- Use upstream accepted fix for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-8.20170227git" date="1514980800">- Copy labels from certificate (#1448555)
- Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
- Properly parse Simple TLV structures in CAC driver (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-9.20170227git" date="1529409600">- make ECPoint behavior standards compliant by default (#1562572)
- allow mechanism to be specified in hexadecimal (#1562572)
- Disable pinpad by default (#1547117, #1547744)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-10.20170227git" date="1530619200">- Improve support for ECC-enabled CardOS 5.3 card (#1562277)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-1" date="1549540800">- Rebase to new upstream release (#1656791)
  - Add Support for HID Crescendo 144K (#1612372)
  - Add Support for CAC Alt tokens (#1645581)
  - Fix usage detection from certificates (#1672898)
  - Fix security issues:
    - CVE-2018-16391
    - CVE-2018-16392
    - CVE-2018-16393
    - CVE-2018-16418
    - CVE-2018-16419
    - CVE-2018-16420
    - CVE-2018-16421
    - CVE-2018-16422
    - CVE-2018-16423
    - CVE-2018-16426
    - CVE-2018-16427</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-2" date="1553688000">- Make OpenSC multilib again by moving the conflicting files on ix86 arch</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-3" date="1553688001">- Make OpenSC multilib also on s390 and ppc arches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-4" date="1605268800">- Support PIN change for HID Alt tokens (#1893856)</changelog>
</package>
<package pkgid="ae600f6a2b84443ee88387123644a4663054d971a51dae9dbe79ca91964ca81a" name="opensc-debuginfo" arch="i686">
  <version epoch="0" ver="0.19.0" rel="4.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-5.20170227git" date="1495108800">- Add missing pkcs11-switch script</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-6.20170227git" date="1509710400">- Use label from certificate DN if there is none (#1448555)
- Use Cardholder name in the token label (#1449740)
- Avoid infinite loop when reading CAC cards (#1473335)
- Workaround for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-7.20170227git" date="1510056000">- Fix issues reported by Coverity
- Use upstream accepted fix for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-8.20170227git" date="1514980800">- Copy labels from certificate (#1448555)
- Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
- Properly parse Simple TLV structures in CAC driver (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-9.20170227git" date="1529409600">- make ECPoint behavior standards compliant by default (#1562572)
- allow mechanism to be specified in hexadecimal (#1562572)
- Disable pinpad by default (#1547117, #1547744)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-10.20170227git" date="1530619200">- Improve support for ECC-enabled CardOS 5.3 card (#1562277)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-1" date="1549540800">- Rebase to new upstream release (#1656791)
  - Add Support for HID Crescendo 144K (#1612372)
  - Add Support for CAC Alt tokens (#1645581)
  - Fix usage detection from certificates (#1672898)
  - Fix security issues:
    - CVE-2018-16391
    - CVE-2018-16392
    - CVE-2018-16393
    - CVE-2018-16418
    - CVE-2018-16419
    - CVE-2018-16420
    - CVE-2018-16421
    - CVE-2018-16422
    - CVE-2018-16423
    - CVE-2018-16426
    - CVE-2018-16427</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-2" date="1553688000">- Make OpenSC multilib again by moving the conflicting files on ix86 arch</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-3" date="1553688001">- Make OpenSC multilib also on s390 and ppc arches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-4" date="1605268800">- Support PIN change for HID Alt tokens (#1893856)</changelog>
</package>
<package pkgid="90b6b011d4bbfe20414a3e5efb80dcb7410978c2e151b5cb0978bc1b620be820" name="opensc-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.0" rel="4.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-5.20170227git" date="1495108800">- Add missing pkcs11-switch script</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-6.20170227git" date="1509710400">- Use label from certificate DN if there is none (#1448555)
- Use Cardholder name in the token label (#1449740)
- Avoid infinite loop when reading CAC cards (#1473335)
- Workaround for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-7.20170227git" date="1510056000">- Fix issues reported by Coverity
- Use upstream accepted fix for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-8.20170227git" date="1514980800">- Copy labels from certificate (#1448555)
- Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
- Properly parse Simple TLV structures in CAC driver (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-9.20170227git" date="1529409600">- make ECPoint behavior standards compliant by default (#1562572)
- allow mechanism to be specified in hexadecimal (#1562572)
- Disable pinpad by default (#1547117, #1547744)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-10.20170227git" date="1530619200">- Improve support for ECC-enabled CardOS 5.3 card (#1562277)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-1" date="1549540800">- Rebase to new upstream release (#1656791)
  - Add Support for HID Crescendo 144K (#1612372)
  - Add Support for CAC Alt tokens (#1645581)
  - Fix usage detection from certificates (#1672898)
  - Fix security issues:
    - CVE-2018-16391
    - CVE-2018-16392
    - CVE-2018-16393
    - CVE-2018-16418
    - CVE-2018-16419
    - CVE-2018-16420
    - CVE-2018-16421
    - CVE-2018-16422
    - CVE-2018-16423
    - CVE-2018-16426
    - CVE-2018-16427</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-2" date="1553688000">- Make OpenSC multilib again by moving the conflicting files on ix86 arch</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-3" date="1553688001">- Make OpenSC multilib also on s390 and ppc arches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-4" date="1605268800">- Support PIN change for HID Alt tokens (#1893856)</changelog>
</package>
<package pkgid="15b6891de7f2f1695e46f7b40145828af1cd7566726e33928b2b0d807d1db087" name="openscap" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="34e05dfa74d66684bd19b4674c1796ca5197a37e658e5d378d9e3736654e0d5f" name="openscap" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="8d9171c5da96b5e950030f929160caa3b6a20b7e981c80fb5c71a4ded6962290" name="openscap" arch="src">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="d0786775b7c47d72dd5fad9f6c89cd25c6f17aca41591597cd0fd07eccca8594" name="openscap" arch="src">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="7f50195fbb417189ec763e4ba3a98f08ca2f162e7b384b71d24ad708a3c28778" name="openscap" arch="src">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="281399cdf470a5a2c3ebae3c90e61637c778bde9acd1dce29a9cddebd32e07d5" name="openscap" arch="src">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="7f50195fbb417189ec763e4ba3a98f08ca2f162e7b384b71d24ad708a3c28778" name="openscap" arch="src">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="92b17150c9c8410ea6e90e2a5d92295cad58a0f542e26ba9145b81045abd27b8" name="openscap" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="804818a3f1de24d9beb2c59f1e8f238ceeb7f91e58f2dd28322e362a1b222acc" name="openscap" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="804818a3f1de24d9beb2c59f1e8f238ceeb7f91e58f2dd28322e362a1b222acc" name="openscap" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="7fe85b33cd2f487935ecd5f9eb6fadce8328781f13b51e9fe0600b925fc11f2e" name="openscap" arch="src">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="fdfb1734e5e68d8df4e2d4055d81ccbf56f3f25bdb02240aec8e51e19402ae5d" name="openscap" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="7347704e8879a7c1d6286c69292585058366aef86b3d0253b7146b496bb28db4" name="openscap-containers" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="fd7d106e7e490c2dcc6c2e20dacf8d54906e6b7e638e45005a04b56cc3798800" name="openscap-containers" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="145fd88ecf21d356f826c0eb42cbc5024c136a8c87b77983cf154082f4a7065e" name="openscap-containers" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="145fd88ecf21d356f826c0eb42cbc5024c136a8c87b77983cf154082f4a7065e" name="openscap-containers" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="3aaa1599008bf001d44b8ae44f08c89b91eb234da20c4d49b1cdcc2d61b1bdce" name="openscap-containers" arch="noarch">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="083297abd6a62ece107c67d91eec533d877a5eda24c88588714446acb799b35e" name="openscap-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="be2f9890b816389a2d27700e37a5dd36f17b4f1487812475edaa8158d8942bf9" name="openscap-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="cb172ae8b6a5911b870da74f5cffbe7cb0ceea4c25bd67cf97cc5bac4dfafc87" name="openscap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="94a311c5fa47e6438d051d0dc60837b3fd488912512691a92add17a6962ba582" name="openscap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="94a311c5fa47e6438d051d0dc60837b3fd488912512691a92add17a6962ba582" name="openscap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="02de86f37f165e170c3e0532a83284375ae0221673c95ca4fcabb1fd1c5707a9" name="openscap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="5730b6dc14280117c1dadff596a3aeecfece2f85b5b34647b6ce635103582ba1" name="openscap-devel" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="203447d4592c105df46b653b45a61a3c33f0f359f18af9cc7b00c26a21e11838" name="openscap-devel" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="ea022b99cc2fc76ec9d5edf79c7036d97fcf809e57a6c0dfd7541bd7a34dceda" name="openscap-devel" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="9a712c00af160520404eadb8f3faa9150eca58faf2fe9b3e91d57a2e8e581c08" name="openscap-devel" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="9a712c00af160520404eadb8f3faa9150eca58faf2fe9b3e91d57a2e8e581c08" name="openscap-devel" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="d118a0cbfd8408f47cec4b68939f633e8a1af2c7fbb56f3c275541f6392bc633" name="openscap-devel" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="5fd2c7d1a06bbdfa84486c9c341bd7058c6dde91bad8f6cfcc562b413ec3667b" name="openscap-engine-sce" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="dc1a0c70ab6c58eeb05394a6e882fdece13094e73ac96da7d31e7e3a2d665736" name="openscap-engine-sce" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="8197bc459376bbf81a3f25dfdbbffb9d9972031ba2023c870fa26be2760a9dad" name="openscap-engine-sce" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="9a18a87af147fc98f7da985b875d7569be42c2455d886ac7b7f33066c0aaba82" name="openscap-engine-sce" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="9a18a87af147fc98f7da985b875d7569be42c2455d886ac7b7f33066c0aaba82" name="openscap-engine-sce" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="3eed16d12b5c95e0ffd56f6b666d3c36ea0822a456396cba426f8e85a78d1aa6" name="openscap-engine-sce" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="7f86e92bfa871c2b7f7be9f6f6ecf7ebab50e423173f070d2a8cb7d2107aa9ee" name="openscap-engine-sce-devel" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="c2b5a9cc6a3edfcfd28ce53413548f7ba46f0d51216bcc71b51743b45ebfad15" name="openscap-engine-sce-devel" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="653fecea18e4062283478c905f571bfda0d860a8e0a3886b2aa15aa0accd33d9" name="openscap-engine-sce-devel" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="d24e2dceed3e6c69afb18ce675199331bfaf087a45d52b84fb944364d9021073" name="openscap-engine-sce-devel" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="d24e2dceed3e6c69afb18ce675199331bfaf087a45d52b84fb944364d9021073" name="openscap-engine-sce-devel" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="08fc99fcd590efc30d55d2a316c1380d0dd44f2dded3e4140ea297eec9a6b38b" name="openscap-engine-sce-devel" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="687294bc4b2ae463a2ea51a32b63625503449543c77feede9d328a3b85c92427" name="openscap-extra-probes" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="e7f3b4eb051911335bf0c6496c8d01e6ab68accac17c3617ad2833f5b6849116" name="openscap-extra-probes" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="ac2892d799bf3dec9f5303fafb47371fb4ad969b54c3a2d1873e0952baf35172" name="openscap-extra-probes" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="1570f36679bd123785a2931d3fd1806e335cb37eedd755e43e2a07ceff88d298" name="openscap-extra-probes" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="1570f36679bd123785a2931d3fd1806e335cb37eedd755e43e2a07ceff88d298" name="openscap-extra-probes" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="3aed3c2839e458bc237ae5afd0a02509b16101c40303e885021816607318f118" name="openscap-extra-probes" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="dbf01bea0115a807d2eeaa79cfd59d929071e50ee0e9e6faa7e8734e6ea93701" name="openscap-python" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="2e2465c1cf8e278200a0918311f509515a1e45551e49a1c6277cfb708a2bd00c" name="openscap-python" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="e6109d32595d8a28d0aa839fcf8928504d66efebbebc7e7e8924f6f359a34e37" name="openscap-python" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="43ef7b8deeb2abb7aecbbb61c82fb77db9199bccf067b3594848453fabf3ed47" name="openscap-python" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="43ef7b8deeb2abb7aecbbb61c82fb77db9199bccf067b3594848453fabf3ed47" name="openscap-python" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="63d53af770c3fe5446c8983889f67de4b5f2ef6c87f648ba585d089a654000e7" name="openscap-python" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="02a17718d0b85e002884a225d8cde0ae20cdc9dd0240c9cb3fe2cb15824330f0" name="openscap-scanner" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="11e158759cff81608a0c315e509a0e497943988de126d8cd53b30511d147b6b4" name="openscap-scanner" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="5729d24056c33987d4db5a39fc0eea9598f23385e6a55ce31b9e62f515d0d87c" name="openscap-scanner" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="efa55f55194e1cac2600c229f49c549a3acf10f1609a6874c4765eb9d3c8970f" name="openscap-scanner" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="efa55f55194e1cac2600c229f49c549a3acf10f1609a6874c4765eb9d3c8970f" name="openscap-scanner" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="18bbb2eecb429661c5dea8ab92d69d70197cf6f807fa07d83075fe3ef654cd5d" name="openscap-scanner" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="7082258c0a9ddf20aec68d8e51c2a32f12322079372fa36d01d6f4da30073a1f" name="openscap-utils" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="74deef7ea0278c94aeeeacc9fdbb21e2c9e6e5cbd6818448a4d412baa46edd82" name="openscap-utils" arch="i686">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="3754bc74ecb5d7c632e967af476c6172d0120b5182fc60216f5c19508aff8416" name="openscap-utils" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="e8457d56f537a37d21f1804a59619b3f66cdd2221273ad0370ab5ae884671b72" name="openscap-utils" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="e8457d56f537a37d21f1804a59619b3f66cdd2221273ad0370ab5ae884671b72" name="openscap-utils" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="428efb7424867875cfd2ab223f6404f08b990a852538d1aa42340be724ba658c" name="openscap-utils" arch="x86_64">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="6de5635c81e9ae74f33ae32bcad69f84f691c1d9af024658312c88c014b1cfcf" name="opensm" arch="i686">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="cb8e4c6b5eac606f8f56a1753d15234c1f412349347114141454cec636fd1871" name="opensm" arch="src">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="a6524126020962e82c43e59bd8cd0ac8409adac0eb37c4180b24a50ed92dd1f5" name="opensm" arch="src">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="6e54956e11d2f4b2e640907613101d4ab9a77b8a1912a4591765512e0ed0b7b7" name="opensm" arch="x86_64">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="5d1a7f94685298060e1f29884c805c17079f9ec8d145695cab84b54e8801ea28" name="opensm-debuginfo" arch="i686">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="b053a81d127029a5de0a7073b509c6485a6d3298605833fe9755e0c853b8553e" name="opensm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="59b06b341d50f667f08ef751cbc5083a749aa2bd8c757b994e91bafabd62cefd" name="opensm-devel" arch="i686">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="7e1b26dd44bbc86b9bb7db527d94c0dc37ccc9b1df3c13f80046817b74463a0a" name="opensm-devel" arch="x86_64">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="1f180d3b36ad34255a8a4ccb9cee4d65c95e837fe25e4b7c79013d87204a801e" name="opensm-libs" arch="i686">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="a0cc6b71c94d7583c6eb55c5b2c1008fe285be2d3c906cb3ed2719702e6bcf93" name="opensm-libs" arch="x86_64">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="64d0fca3a4e5a023872085f450ed5e384cc667cd857c450a30e0946e4b56f28c" name="opensm-static" arch="i686">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="0367a09970eca720b0a4dcf2f7466d6f58ee457b1988691d9e8e93c5d5693bf5" name="opensm-static" arch="x86_64">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="60914312091e31bcbecb5bb3940bf20351277a6b5f074cfc5bd6833520a69f2a" name="openssh" arch="i686">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="cf9583e3570ee71180c628b7505b0b39946f5d409c65fbaa53c1db778881135f" name="openssh" arch="src">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="f5a9660b172cade3fa7e0e117ddf95de2b6153e880241318de87505fbdefdf05" name="openssh" arch="src">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="d22d5f1fd87e7f5f614244b88586de6c77240f30a32f7619a8d5479755985420" name="openssh" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="38309ccd0ad079e5cb2d07771a381a076726a20b7388b42bfa6573e6531d7713" name="openssh" arch="i686">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="38ce0650bb8e5edf25d65c046e3202c0294b1baaf47f7ed8ea2adde654968251" name="openssh" arch="src">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="6c1bc728d21689b1df80b5c64f05de3969905f5db31b510449c88c6def49bd6e" name="openssh" arch="src">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="5bf9855a7c4370b85940ba148dda13c6e1de4ea054aa96e6c1460a1c47ac188d" name="openssh" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="e6ebc315ed7e22309c6b02852a8d4326bdae5f91a5c2ca5c6b1a1b6694c7302a" name="openssh-askpass" arch="i686">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="10d9b952b4cd15c725e712963a907b762c09e3ceb934b5c33e02782daf347631" name="openssh-askpass" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="c8d8409a463e6b3f5b21ee78bc52641c1f6b8253366751a2ff531d5dd62beca7" name="openssh-askpass" arch="i686">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="becd61b6ee4bf58d963dc65d785ebd6d445170898b38727082bad2ccd7452ec0" name="openssh-askpass" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="bf81a56eefabb2e26933a6a55003af84c246e64308c4cadd0fb95af21a792482" name="openssh-cavs" arch="i686">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="822a2b8e7f3aa96bfccefed219c9af2bb3136e4b64f2b776cd9b6248a049e840" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="78e978598aedfc09be8aff28fa616050166e9af00fcaa709db8129786511007a" name="openssh-cavs" arch="i686">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="c7f1cd77957d5c142949032f93c41958eddfdc2418d3fe1385cd5df3ab7c1dee" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="22a5d87fc3e6bb8aa4a606f1562d48e05e11ed7a0b9c69e66100a791f1692958" name="openssh-clients" arch="i686">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="71978bfd0824d137148696f0ca1819550ea99135744edd5d9e49f98440a36bfb" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="a6a21477b106b274935cb464746a579d7c7647bc1b9f1bd3a6e0741bd8e2db3e" name="openssh-clients" arch="i686">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="84ff3ac18571c3ade7c126c3f98de35f7d1b16b4b78fe899ca874821e8ea404f" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="f15152df840922338c43015e4e9733ebd19ae73595d23592190cb4bd47761d5b" name="openssh-debuginfo" arch="i686">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="43254379d560b29a07dd33e2dba4cb22e0b591a860f13d9427c74edd341c98d2" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="d86f9f37c5d4266ca85b0ba2f38760e4a0830484475792e41a81d19fea95b8ec" name="openssh-debuginfo" arch="i686">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="d45d304d9d03fb2fe435d4030d523ab2254282cac06b5f3751be49a329771af1" name="openssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="2e53080a5553883ebef2a1456d20819a5255e02f69baf3abb9869195b95cf00a" name="openssh-keycat" arch="i686">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="72c8d8feb58a6e5423930ccf5798868767898799e2b0df5ceb2f9a0db0d72f86" name="openssh-keycat" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="9e2a1a22ad7235d1503260ec01fc6fbf2602f9b0691beb779cfb4a3fff831a1c" name="openssh-keycat" arch="i686">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="7708ca85b5bf9a9cf5cf9c6ac52f196495c4fb48e8e3df3d7b1e81309bec8961" name="openssh-keycat" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="bc30d6bc0df498037686127319c73a20432bcd8fb47463a453c3d74d6223688e" name="openssh-ldap" arch="i686">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="472e2fd719e55651dab7f475d1745ca98a9fa39ee63ce81bf822bfa629d8cd33" name="openssh-ldap" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="572f17619bf5a120104abeb755fe2252825570d786ef13cae128514e72ed8d21" name="openssh-ldap" arch="i686">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="93e2ee2bb52eb6b6ef2c957305478ce240bbf33896316ada9fbb4a762cac0561" name="openssh-ldap" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="bf911fd2c7d2d996eea7ef8a9bfbfa8cb8382872460558e9023a8563104891a0" name="openssh-server" arch="i686">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="76bb7858130c817e79dcb959b89de2e2df596a0c73a14093c3270e8596128037" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="bda31f83b73201c788627727f4022f85fc26c93d4f3caafc3d86b69170a6d488" name="openssh-server" arch="i686">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="1846476513dd89c4ebc37853f9012fc95a4f77e71003c66fd3bd2d8bb34eb552" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="645e2f4c9487c1448962c7484d467cd082d89eb377f07a003877cbb729327d90" name="openssh-server-sysvinit" arch="i686">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="3005b83352cd490c0e92c6dc3bde8543eaa2264c43ba5d55611d4e389d7dbe0b" name="openssh-server-sysvinit" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="7690d16abdcee16f2ea82c3b97090812e828b5bdd13973aeb0217331b3e49554" name="openssh-server-sysvinit" arch="i686">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="9a2e1a1d65225e77555823bc95e2e791c72904e36e16f629c30052a705391395" name="openssh-server-sysvinit" arch="x86_64">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="c0c039d4566e4e0c810e77b42858661bd8f7ac10ca5c77d5ad3b8a091d4e3d7b" name="openssl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="bc9082e3d19ba4d70a785fd61bd6d0084f568630dc4724d394aaa8968d12ca3b" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="b724e6dea9c75da18751f4ef4ad57986aeb2f3b883cf9198bc843189cda62dd1" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="7fab0094aa57a7dc7d9fcfdbf2509dd9d5b6a8352f10f5b1033983896a55b714" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="f2abc7c6e887d5642c5d23e492c385c5059d7da536d63b5950c83e60f1c8bba3" name="openssl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="5153f98d72922437e82cf2bd5fda6981058df6fe2e45301d2b2535d80ff6e322" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="758de0dcd86618a4cbde5702c80ac2a511a5fa0e718ac8f0ea3ef69f7950e108" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="fa40480e23c023c10796d06a0801875f2d77bd3342107454613e28431ba77b5e" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="2af882f223e8c7e6379b5de08a9dc2a86b3d37b2916c414b9985a312e63e86e4" name="openssl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="440b70d68f8a8f6f063ba5bc091865086536022513b95d22e374e661edc2f72f" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="cdc1cc6d04c5207fd7cc325f25006999e58dfeee38857e47325c3317e000e46c" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="67aeec5f0bd9f90eb8c25b5cbc584491a7de526987bb79b0507eeaebf8565fa0" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="b89dbfacb7ab4e9f454571c538464332d3fd79f4130b478e8ddbf1a8b6efb5af" name="openssl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="9da41593a79bcfe31027d7a4fd8756272a86b0b237cae4379f22546c21836f42" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="4f75ca0094f5fa8dff3be089e41f6fcff9ca8b53168ea9b45f730fdf080139cf" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="5df947b2c7076967fea5482dc1c5c0042969c92939b4a617efe07680392dd119" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="445f4887742fd5b2187c646bea9579cde3f44d4ae2551409c3eb607f7c2519d1" name="openssl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="bf2753f33a2d598a94ddf32a7d787d47364ea48584ff003599c7f5e8d58be4ac" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="1c455c804d2a6b63c243e04664caa836400e326386b18f09ec6b9426b78ee405" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="a2a019ddc9b47e75fbf8e059ec371d2e001bf2e6ecb67cfc97361eb14b3e5259" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="28d6ce99d3e851b379f5ff1b944936c5c7c123c691956181fca505a8059146a5" name="openssl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="d4d1dbaf98e5bb08543273d9b12a5ef38bd2279c8622f66d3a803c60c602e085" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="b84fdff6394b1e67cbd084c5301cc59b2d341f69d34524827002628351dce83f" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="b817f60965831634c126438870b5327be5efff0234f30f16728b08128ef78d38" name="openssl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="14aa8ffe803692b945ed6327b6d89b10fb82aad3bdf0393824720ef0d579c327" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="27eb7e1bb537bdb8ee5b0359600780efc64302659245365a4cd8f2b90b7e7813" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="17652e81ffcd96a4713d9ebe86d047f6175e84f38271333107ccb741bb7288bb" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="1cc1dfb02f7c565d7016b2a13da4bcd616e048e65a50c9ebc3662a054a98173a" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="938f46ee1b96921005c5c8cb46ee2ba180d6439b6eba9424556ab85066de496f" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="f1cfc5c53cc70b95fd51e68cb991ab757e144d5ebf3b5932f49ba8b1604a4df2" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="a243f324efdeb34baacadc8658d7f0fb147ecc26647025733f7fc7551d42139d" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="6e277c4c5ffcf9ccb5c30d0b940c99bf2bbda6eeb504396419c8427e14ce4a46" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="573acf7d7b726452811427412c423e60ff7f6b798dc417d057262adda2b53224" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="7216a9adb552f4b86aee0dac61d71144776e6daed6ad6f2a44e53e51f80d9206" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="1bcf0183c9431d1789253f15d4938df5d7987c682c484ff0e852fdef4905f623" name="openssl-debuginfo" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="3320b6c60d5dca201cab4fc7bc9549ad4684fc65ebc8a83630009cf5a023cede" name="openssl-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="cf924084a522445a7731e97cd48b840c22b7132485253df0c87ecc64bcf54f03" name="openssl-devel" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="cbc5b3a2efe3eec25c97723d56c400397aa8e89e7bcb3146ebdd271591ef0cad" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="c8de55b3efc2677f98cfec3e01c8b3e413c1ad9d5e740ef48d1c217cc057f7b1" name="openssl-devel" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="475ae6d8076423a6b461aba7de4c2f8767b7245a15929afa6fda22b15bf1edc5" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="f75f71312a50688faa3ce219494019c4b484c559519ba5df134deb4a2b83b875" name="openssl-devel" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="ee3a0984dbbd41eb757f4fabed318c95762a14068fef277114eb9460927a197e" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="f7535f51329fd80e73d37f43056c5a05cfd2ba93c2e31789091fa44950bacf71" name="openssl-devel" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="fb74cd9999717f314e8b1729cf7763dfca04a093e392624117e318980f32adfb" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="31b86ff445a3ae1f311c5936bed4ba19f8e762e6d222dd99f3f4b0873f503607" name="openssl-devel" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="c329c92a217f62ab90cfe043207b92546b82c8875c5d3d88fafdc731ba2deeca" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="0ac9e941b3f69718e2f88440b92d25a918e67021cacb566ea3ad36d545b07aa3" name="openssl-devel" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="1dc53616375942dadd53372cbea907e6ca07eda2d602b7418fe6ffb7c3524357" name="openssl-devel" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="3484bf465a9fea9200c6887dc60718c22859dacdd39635bfde69cfa3890d1c8c" name="openssl-libs" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="9dd301f18e6261069daf805db259bc9ec8f5c89a64ee9f7a36d15c435975ff41" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="11b741ddc7d94d5adba1394548d52393bf1f070d94788d11bb62a27c2205c954" name="openssl-libs" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="abbd281d1561fb363446c563b855fa037abfb6d7a232da325e0914de644c4ff1" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="4191743fff688a547d6974fd4ce281c202d12e7855da6164ca73811b49f730ae" name="openssl-libs" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="8c92501127364630fd10cddab2a1b6624ea7da32bb779e7b0e8c34b01596dd2f" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="afa071b1a0c14a940e67f3ff4d32ba95f332aa23e0b6cebefe4b6eb31b12991a" name="openssl-libs" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="014d1332321dcfbd8f6222df050d59937600c27baa8e9e549d9f68e6a45ef7bc" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="e6af25f45cbd06f51ba6b8e44202786c27ca4f2d0bd7d1f5667c04c8449c41ac" name="openssl-libs" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="e9c01eadb04955e4926bb6230767f366e5b9c8ec89cc554a055c420af86b5966" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="1311e6159abba06275d1ee5eba99f51842e0d51270fe225e7a19b8a86e96a379" name="openssl-libs" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="88b664cfc215d0fd48668cee605a140405ab62d498b2f40c9c03b33113d1e061" name="openssl-libs" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="5a0849ea9147c314ddf7d3c7857dd3c00ef18bd69772e31cc6b17d3116a96924" name="openssl-perl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="b8e9449ca2051f88d885bfda0da0743ee3372a15f3d42c148536ae938262bc51" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="9a0a3ee646a77314857a1a0b1325c69b96d2876ecf27fb00a9ba44cecc09c147" name="openssl-perl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="dfdefc587730a5b640a75e2f2ad21daf889d3e3323fea9a81fdc8a04c6ba2ac7" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="5ad074cb5e99e3be334d094f5a6c881a7f74d537bfeee1eec9e8aa59c2c3242e" name="openssl-perl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="1d67c0af9cbdaf8f10092153886c6b16d552937dcfc572666789e582fbad2c10" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="293216c8a1d6fd187f14766718ec43c9673b15de48e8ec83aa942e6fe8b10ebd" name="openssl-perl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="b79d8ec4f604ff0024f272e33f9589c9bd1aaefdcd79276285c069bfcbadfe1f" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="3c9755d07297364f893c5d23b768de70ede99fd37a067c1e8e03b6baf5580b59" name="openssl-perl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="0dbd4d5bda9db80d2942157792815cfe80865998a79341b088077d52b1d96d03" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="3fd1c2bf0c430fd121def5fc3eea9804405ebb06f895add9c7a61903b3957ab0" name="openssl-perl" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="a982f16f4fb78971d963ce7047ac71cadd34220bf24d75c566b807b337a746ef" name="openssl-perl" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="9fc8ad50b674922a4c052ff42f34239ad84950a834ecacc5ba0b8efa69497e31" name="openssl-static" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="e7934e480547cb197f09e2c44a997ede96e08f325a4a365ce711c99e3914f404" name="openssl-static" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="53b250eecebc66b4fd0865c847183611e23731eeb60b26ba07ae8e2224eee6b5" name="openssl-static" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="7f182d3ec908449232a8cd097b7e189ce2be2b3513d948680c0c62c6df57f42b" name="openssl-static" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="1db4b628d799cc88252b24f7c2b368816268d3bf0a94cc3b0d20f43af6ba0ce3" name="openssl-static" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="3d64f688083c6378f7d39d45512b14920c81ec5a1a886e0295839e8022aa621c" name="openssl-static" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="800434cb565771bd1df72ee23c095c1414f06a264e946b7c9d11c87f20330925" name="openssl-static" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="e76186d1c0858a7e27e664dcd39384a66c0650643a70bd7267bdfb3bf1e92bba" name="openssl-static" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="29a5308dcb1a0075d01c2dc13a5a72f89f7c3fab866a26820d4d9a390d5321b3" name="openssl-static" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="5d3b175c16f440b73414a47fe2a0d9bdfb94ef9e79fbb2df8c1380aacc1d5e52" name="openssl-static" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="8ae6f8a9982476df72e9c25897dea61ad0d87ea64e45d14880434ccfb68c96cd" name="openssl-static" arch="i686">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="43cd48d682cdd22f6135b4e06c8cb17cb19a0c3d2cb643f3c27d125364a10144" name="openssl-static" arch="x86_64">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="69c08d04a996a1212b4a087b5d5b360811f5366389e10ce72dabeeea008c2b58" name="oxygen-cursor-themes" arch="noarch">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="b6e261d934096aae9084fc4fffd4d08033bad2fbc6b48f83ab1b6f2700cb290a" name="oxygen-cursor-themes" arch="noarch">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="a782ff7d00119d6237f7e49350087296b0c676c9cffda898ad4d59a04f85506c" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="cad27cf5f7e5138ccdde629e724f194c7c370711b9526c81c40f92f705259653" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="c98f890bdc34d45c42100b7e2d5212ae1aa1387f1dfa24dbe045d2f61cd34317" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="f3b2ffacad60b18460439baf36b6039396cfce83293da5e165d2c77f3fa3f22e" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="c79881747e69e9290dba8135334851972a63dbea96276016a42bed31ad749bce" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="68049444bbc4df44d34c8d307a19af4d865858552066bb7abfbe812528e182a6" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="71a47f6d253c389ca8ff0527f90654b0cd82f95c26c2f0d7f2243773f4ed3cf9" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="028290037cd2b2e0505b830e30acf51d7a46ff891cb72a658ceada80fd5f6097" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="28da8e9ad37707b4b36e30fcc575fbf184fb3d8fa45e573c611c252163dbebf4" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="4bff75e7f95f047af433e3bde5e4597dae94e08f5ae8bcb08059ec89bc6480a4" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="2423fd4677efa92783623a820012ff800ca1fb4c3e245813f040b785ea077a07" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="43749d605c116b4fdd37f94037db2bbe87c999f89fc0a19280a67e071e8af9f7" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="30702262d0ad5d5aec6fb4738f32f9c6601e6167dade8e82458cbb9d6ddf157e" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="ab3148c6bcf25a1885e91f7d98e172646e153d591640d9b8a830c7f97ce01260" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="c465cf4dec21e9ccd895c3bd811333f0bd858d00b649063b2edb45ae09ddd2ed" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="76e141604b3c0088b3dfaae2a17b8b9099d0092899a76af6a3462142885600f0" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="9ed75a52056a2308e56d0845eb5a6c859dcb0b73e11a4b46d51f35ef7dc0c1c4" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="9b377bc5e506f5f84e0f0a71cb18d459ec7e044807f54fbf6d957ad965f8b68b" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="94ddb4a4b83bfcadabb1748ab4116ebec6ed76c50763e1b03161417c2d11b3c3" name="pacemaker-nagios-plugins-metadata" arch="i686">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="d6148642ede0f3b169267370a56c1650b4e9ee6898c80538d8907cffcdc8910c" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="3de7edd266b2cc404c7ab1c72a51c8a7007d9d96f7e672b8f74843e3190a549e" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="d8cc27bf7a325be3607e365a9747671428559b1809135cf14d941c1c203a4c82" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="4cb1b7b65ca96c891bff639d205e39bd4647de4da07e8538b88405297dc3e036" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.10.3" rel="2.22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="4776a5852c5ff1390c6f23105b95900c7c4a31551341326f9f8f28dc194ddf23" name="pam_ssh_agent_auth" arch="x86_64">
  <version epoch="0" ver="0.10.3" rel="2.22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="bb34e84bb0fd76e6ce4d21748897f57af8374d2fbf727a0cc60bd9ee161e3e88" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.10.3" rel="2.23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="c3d35d6379cf41c9c85e5f19dab550db4b399f055c1452e354bd33cb5fe32a0b" name="pam_ssh_agent_auth" arch="x86_64">
  <version epoch="0" ver="0.10.3" rel="2.23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="3ae6de1dc724111f133cffb3eba16afe766c4b01a48077b97d5b76f7d1cad98f" name="patchutils" arch="i686">
  <version epoch="0" ver="0.3.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.1-4" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.2-1" date="1297339200">- 0.3.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-1" date="1364904000">- 0.3.3.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-2" date="1365681600">- Fixed help output (bug #948973).
- Fixed changelog dates.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.3.3-5" date="1608120000">- Resolves: #1905282, filterdiff not removing the header from excluded files in a git patch</changelog>
</package>
<package pkgid="44eac43582de35daf7563b0271cccc22d2c59adc91804c6487e5a936a7b19a7c" name="patchutils" arch="src">
  <version epoch="0" ver="0.3.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.1-4" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.2-1" date="1297339200">- 0.3.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-1" date="1364904000">- 0.3.3.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-2" date="1365681600">- Fixed help output (bug #948973).
- Fixed changelog dates.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.3.3-5" date="1608120000">- Resolves: #1905282, filterdiff not removing the header from excluded files in a git patch</changelog>
</package>
<package pkgid="76ca49330f349a6f2c1db4da6cc6d2e26747b4beb5f78d13f44ca39df6d3d5b1" name="patchutils" arch="src">
  <version epoch="0" ver="0.3.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.1-4" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.2-1" date="1297339200">- 0.3.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-1" date="1364904000">- 0.3.3.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-2" date="1365681600">- Fixed help output (bug #948973).
- Fixed changelog dates.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.3.3-5" date="1608120000">- Resolves: #1905282, filterdiff not removing the header from excluded files in a git patch</changelog>
</package>
<package pkgid="72b0a20e1fbcdcb29f9a3a1b3c2b45bb55e2f723e30b06ae423fa818c3d757f9" name="patchutils" arch="x86_64">
  <version epoch="0" ver="0.3.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.1-4" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.2-1" date="1297339200">- 0.3.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-1" date="1364904000">- 0.3.3.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-2" date="1365681600">- Fixed help output (bug #948973).
- Fixed changelog dates.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.3.3-5" date="1608120000">- Resolves: #1905282, filterdiff not removing the header from excluded files in a git patch</changelog>
</package>
<package pkgid="a05fbeab111622439c2a07a653f621514049812c205ca77d05fd8ae933963cf9" name="patchutils-debuginfo" arch="i686">
  <version epoch="0" ver="0.3.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.1-4" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.2-1" date="1297339200">- 0.3.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-1" date="1364904000">- 0.3.3.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-2" date="1365681600">- Fixed help output (bug #948973).
- Fixed changelog dates.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.3.3-5" date="1608120000">- Resolves: #1905282, filterdiff not removing the header from excluded files in a git patch</changelog>
</package>
<package pkgid="d8d4f0cc0f0db079da417d1519d1a63169a8b5f4602c5639e0a5f34fd300414d" name="patchutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.1-4" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.2-1" date="1297339200">- 0.3.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-1" date="1364904000">- 0.3.3.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-2" date="1365681600">- Fixed help output (bug #948973).
- Fixed changelog dates.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.3.3-5" date="1608120000">- Resolves: #1905282, filterdiff not removing the header from excluded files in a git patch</changelog>
</package>
<package pkgid="7de31baf75744997f94aebe585021f68b1114cf94db6f4868016348e411fe29b" name="pcp" arch="src">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="375d05278941ce634fe8257de4ddecdf10492c74babbff0fa313cb2a08c8e76e" name="pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="21f20652065598a2fbdc608461cfa8cbdff70a496c6051821749f7b5b0329f4f" name="pcp-conf" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="02163c6283fcbe01f6797d3ebbf9e7ef022ca3419d553ee0514027955d6adcc3" name="pcp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="89b96533c6fa4eeb501a98953063322323d496b546a4a5042bc2ad658fb048e8" name="pcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="2f901cf3e51f9086b07583f990e4ada304ecbb312061b52c0666b94584e64aff" name="pcp-doc" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="c1f7c15a2c0c3a356d19ae05957187c732c96cebcc6b30421110f866c7c5faf6" name="pcp-export-pcp2elasticsearch" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="f1fa48583dee635fb67f1000aaed40d294f99dc8693b6de343f030de4b8e884f" name="pcp-export-pcp2graphite" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="47c4f42b055b39020435665404e43100628df882af5aa48eef8120c5d2856d1d" name="pcp-export-pcp2influxdb" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="496ca8c357ca816f0ae3ca41981d69c155f46063177d0d651b327dce4a2ddd0e" name="pcp-export-pcp2json" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="4471225ff1c6f789819b85d9cc7189102264934afaa8e25c9d5b31b5ae2bd41a" name="pcp-export-pcp2spark" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="3725e4f6c8b3b67734e98f233a3dccd87d5aafe0e1fcf603fb334ed735a1f8e7" name="pcp-export-pcp2xml" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="b1ebedc5eea59484058e590ae6d9cd66257a93556df99b8043fffe56319c64d6" name="pcp-export-pcp2zabbix" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="d38466479770606e2225dcaf277d714a62a112d74b58e4cbe29ffc7c6729ede2" name="pcp-export-zabbix-agent" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="3f48cb22fbc36ff6e4d80245da121fe0fb6ecaa798db8ffb0178ad559d5a02ee" name="pcp-gui" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="5f842fb06f2f5c3a2ff954077a030c1489287cd0d9674939dddc9f3e91b44f26" name="pcp-import-collectl2pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="f800d7bd1b484d97f03048c1bc4a3cabf571f4c68518a54cfb6eb46d9f79cc37" name="pcp-import-ganglia2pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="409b019a0be71d01e3dab5cb13c288e247ba67228d3000cd6b4165497e3202c9" name="pcp-import-iostat2pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="e198d66e7a2beee3d5f9e897cbf1f33a94a79d3079691d78f935d29143d9c04b" name="pcp-import-mrtg2pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="b65a0bde43d52b82ed86a0f53ec81cfa93229630157837f3b9f0e06e4e42fb20" name="pcp-import-sar2pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="9ad00bc077f1aaa1a3dae0dc5739be2766e8f8ee3864cf070944603e0cd99740" name="pcp-libs" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="27fde918d95b668e1890afbb7f45a55d29f775adc0d42f59db8b4328d3523cf2" name="pcp-libs-devel" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="8397d4b6e4fe15497e234a214288b0c33310395bc519240ca0dbaad71e644f4c" name="pcp-manager" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="cd41d5e7ea987d52bdcea27e049832cb81cd598590b6bc95daa44463c509bdf2" name="pcp-pmda-activemq" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="572a3fd083b1fafe2c59c95aef8d53d45d71c3d09a27d79c369a3b85afbd8b7d" name="pcp-pmda-apache" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="7d29176319e7e74a862a2781b0746efae30f6e3330b666a73fcfaaeb7bce42a6" name="pcp-pmda-bash" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="c04524b52d90a42e81f86d49d1599358a56c7e491b7f6c8e3652f68cdd8dbf2e" name="pcp-pmda-bcc" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="a7d4e8af5bbe7c0e46eeb5473df23da186142eafbdd597a8e4d4504354b8c2fc" name="pcp-pmda-bind2" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="5f3ecc50bf413489c7c9b1ac433f55e1c3593382dc7dfca4e30a7551cca0470d" name="pcp-pmda-bonding" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="4a175ee68ebf3e75089487c9da7514be6c37cd55b20fe7c7301163f1136460d5" name="pcp-pmda-cifs" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="31914c23c710cd535771542f78d55b27afcf9b1a9e683dfeadf76a822b9304c8" name="pcp-pmda-cisco" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="39039e350d7fa292d27509efad5a365b13ba49780f8ad21911321ee70d53af85" name="pcp-pmda-dbping" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="226f1cac06e433d7fcc1abbd737c541b16cc57d26fcd7a983a7cdc605cd25a03" name="pcp-pmda-dm" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="34f6b3d51f55c5aca801144ce15ff8ee1f36529444a9d633bf49c2bc61ffc1b1" name="pcp-pmda-docker" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="2afde25d2001465c0df8180955c0745f09c85438948686a18c4cab34d54fc820" name="pcp-pmda-ds389" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="c17c0d5b4b2071392a8cbbbd3c1b4944ce49b05863c14a8f074096b8fd9a4c3c" name="pcp-pmda-ds389log" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="7d7774d28886698dc0d3e3ff7d8170cfe492d4f6e0decf81b7f6d2c0d07f8bc8" name="pcp-pmda-elasticsearch" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="8092c86a956a19575476a596e4bc68f7da8b2ca89d0ede5167c45e2196f9ae0d" name="pcp-pmda-gfs2" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="902d6a0ff693849ff37633891398f7b2c60694711c14cac2524e6ac98659007b" name="pcp-pmda-gluster" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="9cc398813e59c958185126720827f70d3c75b7912454d5ac8db84c4156160fff" name="pcp-pmda-gpfs" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="99433684fca90c0989ffb13ab893ff54e6341aabf1ee1160230bcf67ce068773" name="pcp-pmda-gpsd" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="cb40ab77c0bb201527db2b64da07905a80acecf1ea5b501a097b3263d48341c2" name="pcp-pmda-haproxy" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="195e8d5aa4c034f28f847c4571f61f86ebb4997ab69ee0a92b2edeb28dc4e852" name="pcp-pmda-infiniband" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="41d3c5c3da83af104ebcc9c35ce73e3933e3c8cce908bdd57b13a27636542d5f" name="pcp-pmda-json" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="7fb3b6f166f98e7b80625b24a6e22c7191b414a114ea95fd04823c1295977c3f" name="pcp-pmda-libvirt" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="9035dab4352f98fe4b9e541d0ac504c5b5b1bdc4c916c80ae3c8962bc687ee4a" name="pcp-pmda-lio" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="7c642b68eff6831e304d3b163317de9dfd71b55c6d15cb9e280ada8c7e4f9968" name="pcp-pmda-lmsensors" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="bb588a1540d2f62872975c73ed7cdad520898f5870ddc04964a72bd0c2beaa4a" name="pcp-pmda-logger" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="591776ceccb68d8dd28b6fed35cd45a5ebdf10eba5edd03dfda82d56d2c80e59" name="pcp-pmda-lustre" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="41974c15568b567e39cdf689712d306ac2ba3539e1eb52f80d1950815e9b2300" name="pcp-pmda-lustrecomm" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="c6c56ccf5d2223697fcddf2d6f7d363d7c7bd50db9d7e00a9cf37484445ec792" name="pcp-pmda-mailq" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="8a3563671e4fa8797bd6a37b124fd975a8c93dfe15e26d356357eb1c5843849f" name="pcp-pmda-memcache" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="65232d97ecfeb3e5c1223671d10f0ae4db8cd8f8742fd525a69dc0230097100b" name="pcp-pmda-mic" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="278d84e96711b6bd3f8e5c5b11e14378ec637eb15d0b4b72a424ae31bae98a10" name="pcp-pmda-mounts" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="8a42d3dadbaab44bd3b8a1186603144669c26a942c8df33ac682082ff35c082f" name="pcp-pmda-mysql" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="9f5e961bd54ddfed47f81667f88366192d488ff388e637f58aebf866f0cbc1bc" name="pcp-pmda-named" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="5ba86b8aefb8af735e8861b77618f0978106c01f7fbb90e32f11ba2f63f90a19" name="pcp-pmda-netfilter" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="d22977c76d4e76c6d91decd60714685946c17c47389b99c89f228838661c0624" name="pcp-pmda-news" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="60ac71abbb1cffbff7da0b2e067704a861dbf52985e3e6915bce729e37235ded" name="pcp-pmda-nfsclient" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="8a17af10072a69598933e9188107ebe8e5d8afe703d2b70fd99104f497fce165" name="pcp-pmda-nginx" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="878f754778ce87c8b2affdfe04f671208b090fa2a08e02615dba76f332e058bb" name="pcp-pmda-nvidia-gpu" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="ccd72f3575deae7719c73f6f0760655a3fad9b08530306014d00c0ece23ef25a" name="pcp-pmda-oracle" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="cefbd189eb6aeae1b1bcde7e7279fea68ea62a0a2076e8de21331e82d7f4555c" name="pcp-pmda-pdns" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="dcf4261c5bc8b0e38b440ad90106de56003244a9a9d12bc2b69253c4aad25bde" name="pcp-pmda-perfevent" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="ce90ce83cf1c206c32b64a0142e586a26625ee138ce02b4121d8f7c1f60021d3" name="pcp-pmda-postfix" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="c665ff14485cad506f5f06c2457d0a721977569a632a60ff6a1b0e70581fa829" name="pcp-pmda-postgresql" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="8be75d90b4c70f566f06718cc94d1d50e7089316be69ec25cfe889cdc4d9380c" name="pcp-pmda-prometheus" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="2976ae3e5ac30cb09f2c2476bde76e7044802d89e92f21f350889a560fa20842" name="pcp-pmda-redis" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="6d95ad416609ee08aeaa4fb375a0628379059b3521c150569b229c8a18a6bdd5" name="pcp-pmda-roomtemp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="b0e66599a967acf0cd4eb99baf4082d22d5919f4680969fd8ea2a9d64c837384" name="pcp-pmda-rpm" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="a45731dc7068515a3f85b469af2d0851dfb33c35941e0d773573cadbc9402fb0" name="pcp-pmda-rsyslog" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="3036d1090ef599760a2dff76a9be1cbbdc2bd34ec20912cedec313bbe1ca5119" name="pcp-pmda-samba" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="c0b867ca4391c9eff4d4f23009b2e1a69ae116e99bdb4497cc27580173f79d0d" name="pcp-pmda-sendmail" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="94c9ad3b3aff09eb4923bbc58495ca1fcbf7359327e18efedbd84c9e2988c306" name="pcp-pmda-shping" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="0b132ce20ce773c945c47ceb3d415ce2192f1faa5664b9c00c1a59bef2819430" name="pcp-pmda-slurm" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="4ac2b9277eec764bcda1b2613db8b162f5870bc08021764dc9c909003a99bd7e" name="pcp-pmda-smart" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="afff9c0193892f00dddbba7ff9940867bd1132cf60e32862d389c0fd989236d9" name="pcp-pmda-snmp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="949da46a0a127a4b6f097eff54569098e9120404f3f7ba406d0bc746cb894a5f" name="pcp-pmda-summary" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="eafa99d74e364dcaff9e635d7e4491569176d8670efa2a9e291ebb642b3534d4" name="pcp-pmda-systemd" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="7d258b9ba1ea366f72ac51b29a96d5ac31e19ec5b8a16057f23859be6d298a18" name="pcp-pmda-trace" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="a8f23b4b6e4828d291d78c05dbfbfba051642fe478d0ec814c4b6ac7a9ef83cb" name="pcp-pmda-unbound" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="1149a9c4823bd689b10a7024ef8b793e162b1a9c68ec42f01e9c63fbc8929606" name="pcp-pmda-vmware" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="a1d8e46028968d9e5eb4cb177668ff9caddeca48bfeb8af77875e4905d17fc87" name="pcp-pmda-weblog" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="724f1439713ff514ab9484b72c8b50b25f62079fbef5b7d12d1dc83505200071" name="pcp-pmda-zimbra" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="801646935c246379913bda252917ff701fd5923aedd6514ce76d6921b9216048" name="pcp-pmda-zswap" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="ec50e10ae9d3575335b84a3b06ab11bec49b5d5b80ecd32ed576973c8d04b70b" name="pcp-selinux" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="6f203b4305cf0c977becd9a2606b46f50130a4fe6eb2b2982a034a645f330332" name="pcp-system-tools" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="89e33885cd3115cf5f519839206d20af5af2af3e1379ae3fd0517e21e79c36eb" name="pcp-testsuite" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="16d0f4d65533960868fe3fcf40cec7dbff99597bb678cc6b2d34bb4bac1881c0" name="pcp-webapi" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="4a5f73aacee02d1e20e0b7d7a0616ec38ea7538e421325d15f3824c111931abc" name="pcp-webapp-blinkenlights" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="288058975cf8c1ed2f75bed15cb90a03b5b9bc215f6c80150e195d64ef10d939" name="pcp-webapp-grafana" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="5d96ec6402d91937a1e09e12035d8c5ee6c6fbfc813ce6092db2321727d3f013" name="pcp-webapp-graphite" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="fa3f35079e985c88de995439882aea4ce2bf209b73f058658a6903ee5ec9c3ce" name="pcp-webapp-vector" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="e5feab13ce262b1a76933adaa8cccc339e0a9009a909f8af7535421e8b6127be" name="pcp-webjs" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="f4f4c807e5ef0603196758de37c99c03ba770452a73e875494eb6fe81c68d20e" name="pcp-zeroconf" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="a3c16b11e40696959a22cb94d14ad32ef5a9c688f702754b2baefd2db23f8da1" name="pcs" arch="src">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
</package>
<package pkgid="bce14eea87399f806090a7345734f3e52fec2169e3fb8fb34f9d7b01e09724fb" name="pcs" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
</package>
<package pkgid="93fd4d2449027b9f9a59515bafe1ed79f635742fccd7d1c00d7f0d8edf7ad5b1" name="pcs" arch="src">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos.3"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.2" date="1665057600">- Update rubygem rack
- Upgrade jquery in web-ui
- Resolves: rhbz#2099578 rhbz#2093232</changelog>
</package>
<package pkgid="aafa68be4ff08695d5a22f1493463199493836b8ae5fb2298640b86ac4eac567" name="pcs" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos.3"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.2" date="1665057600">- Update rubygem rack
- Upgrade jquery in web-ui
- Resolves: rhbz#2099578 rhbz#2093232</changelog>
</package>
<package pkgid="b5294870118626cb7fa88cf6b163af198b2fca46f736cc66ff9e05659fda1f51" name="pcs" arch="src">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
</package>
<package pkgid="85cb6a3db08db0231958c560e3365df2537e09a617488fb56751423f2f4bf2ab" name="pcs" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
</package>
<package pkgid="0a673e2f2dff053f41eb28ed475f56a3fec2388c35e7b0acb52222fd640f2c98" name="pcs" arch="src">
  <version epoch="0" ver="0.9.169" rel="3.el7_9.3"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.2" date="1665057600">- Update rubygem rack
- Upgrade jquery in web-ui
- Resolves: rhbz#2099578 rhbz#2093232</changelog>
</package>
<package pkgid="105754a31e60c34ee45c4a10503da173ae02ecb18cf295d7185e2ad4a2e9f3d6" name="pcs" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7_9.3"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.2" date="1665057600">- Update rubygem rack
- Upgrade jquery in web-ui
- Resolves: rhbz#2099578 rhbz#2093232</changelog>
</package>
<package pkgid="c80221c4d715c819553e87de9d2ed6bed4c454b0e050fe145d529d2e93336f77" name="pcs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
</package>
<package pkgid="3d1af081972eba8bcf65569b976d1d195ea0a16955a57cfb7ff05573b75bd208" name="pcs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos.3"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.2" date="1665057600">- Update rubygem rack
- Upgrade jquery in web-ui
- Resolves: rhbz#2099578 rhbz#2093232</changelog>
</package>
<package pkgid="777ca986ea4fdad5c13bf76f0294345495a03a3b389b85246d3b75be549cbc54" name="pcs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
</package>
<package pkgid="76cc3ae3b2bf00bd13931a7181ce1c54d7773d229434d988772ef258127469dd" name="pcs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7_9.3"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.2" date="1665057600">- Update rubygem rack
- Upgrade jquery in web-ui
- Resolves: rhbz#2099578 rhbz#2093232</changelog>
</package>
<package pkgid="a77dbee65ea3eb25d25f5d37836b4e030345446ef2eb9946a69a85fa74d6b349" name="pcs-snmp" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
</package>
<package pkgid="0c303b11dc0f114c35fd64110f262effae84749a2c653068ba897ceb3eb8164d" name="pcs-snmp" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos.3"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.2" date="1665057600">- Update rubygem rack
- Upgrade jquery in web-ui
- Resolves: rhbz#2099578 rhbz#2093232</changelog>
</package>
<package pkgid="b04a342beb70b7eb9e084945e4ce087e387b6b53aa0bdccae2c0571986bf0d3c" name="pcs-snmp" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7.centos"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-1" date="1553083200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1649732 rhbz#1554302 rhbz#1447349 rhbz#1647640 rhbz#1594738 rhbz#1676956 rhbz#1474747 rhbz#1679534 rhbz#1642514 rhbz#1389140 rhbz#1522858 rhbz#1676944 rhbz#1638376 rhbz#1515021 rhbz#1598197</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
</package>
<package pkgid="39cb8801337e9e2dcd513e86ee7132cc025357e81c3f0c16945cb5ea7200a4cc" name="pcs-snmp" arch="x86_64">
  <version epoch="0" ver="0.9.169" rel="3.el7_9.3"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.2" date="1665057600">- Update rubygem rack
- Upgrade jquery in web-ui
- Resolves: rhbz#2099578 rhbz#2093232</changelog>
</package>
<package pkgid="32c21213a28a26e34230e4a2d7a4b013e36310a670b373175a118b35e9ffa9f7" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="a17de5cfb18f764bcd808bc6f0d516debea01f70205bddae382df2782803ae4f" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="8d16fdabb5bfd27f4cb6c8fb7e3c8d17022d0fceaf4c0e0665c84e1acff9527c" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="14ac7e9ed82efdc0bcad50e429979071c536cc7146b861c173ff0178a0969b62" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="ad430e62ab59b2ed53596876f2c56889f0f9d01d2c60b3ffa80a222da08e0c0b" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="1ac377965f032d80becea064bbba99ed3cbccaa7f3ee8f2b6762f7c5ef16135c" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="62b3f88c1803ae78b8b74a487ad55a7804689620da61a0111ecc50f2fe0701b4" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="99a346bde3e4347a2940fef6bcd3765e006e4e62a55bc4387e6bede033eb44e1" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="4e705811a6cf5e4b1d6550845d56ca372007944087f6b33b41da1b1823ca12ee" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="9a4b5f6cd3850689ad40f31b53f3a4e6feb6d7b9372c9b0a58f7320d2f2ac071" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="274302df466f73eea4482bd3646b83f08097e5ca9b0daef82ffd3c1b5cb7e610" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="8f85807cbb1546c3f70c7b506ad6d92e1f6668a0749ed2da81ea3d2d5920e10d" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="f7fa71bc839ae56f4f09c5d3432197dfbf49eee29a452eeb2438c1e8aaed58fe" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="9ccae9f9e97ca94436e20038d0fd7debf3805f1cae267f6733f0edd265f81313" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7e52587aed3bceb4931fd4ba3b92b18aefaf8b180198fcb16eed23c3bdec094a" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="b360c23891facf7582675b356224a507261a624032a8d2b3f1055b4e069ba43e" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="b6514a1e2db8b56060a57cad7d23a06f9c1a2c96e629a1cd6e6d7abfddebe795" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="54a87899651a817cdd159af04dac21f21e0f61b2447610ede7f45b472e7d74c7" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="efb02282e3195ef504446d97f6099bfb9633230a8f0904d0038c7ceae2448827" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="d17586d3caad1a6289a60e9cbed7ea59ea5884bef2727b48ae9cf43b88df3c85" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="803339a872d3961e0728f07c908199f43ca538f7fa8c522966338198d0169daf" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="dadade3ecad9c024335f24e16c9545876481b110288bfc225baa44547c8fedd3" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="8311e8c8efc2e0780226760212a4e4087d20d9a79f5286c4a4d8ffb1e3e61a65" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="cd16bdb4b6c6ff84e36933aa2b98e413d3c97781ab1b09925d588635c7dec628" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="bc93b1f048c0f32bbb4469335ccbd65ce1acec4cbfe936d4f01365300570a518" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="1284dd114f8eb306e7d2712faa32ebc293e15aa341de8358575ae0d8bdd8ef9c" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7b993372100760a5abfe9d55fa8d79c97808b4e9a76a4aa61b5adca18e170697" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="186e743f234756cf5ea833f995a83531df5ec080b4cd1ba417392c6b28a14c05" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="d88c617946e990be6f6b3ab4f11033677a34a0f704dbb2b3ca3ba34012a84cb8" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="fb0034e2bddd2e22e3fc3873a2e493c8e01f1152e639682e616b346840576ac1" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="2d0c149ce7ca77aa464878f233d7a98fa6222ec8e631feebf8098d6483c888f9" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="cf557d96a674128d03e84e6165c8bccb76d09b77f3e39c31b298c2012010c62b" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="99ecb180a3126f11e3a21d4d1951b8b7155958d9948c205e86787d90ac34c3d9" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="2c12253461f9ec144c45b076338fcbdded9ac84c47f94d4e870bcb9aa1fa2d4f" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="131a20090ffa1a4d21f8f4d00a679adc39ceb95b5d5784202a0515f235e5c695" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="0944b88a6783edb11b62c0f5ba99edf76230a597f77a1fc853e456c8941d75d8" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="922efd86aafa0a8574a9da3662ddca605f687331b0ff2e939171a6a24bba7c88" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="0475e8cc065788ea4667d21e6bf318ba4a9fd2c227cf0b539d9ae798b1b0cb00" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="f834678554c7fc320ee75d600e5b3ac325a32a3141f89a92d578f1989c77006a" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="3aefceb9b19a9eedc2629512bd34c631809a7f403a9d26842061ba98e569d406" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="a2d0cc2e906360e1b88892ebb4e01546f25fb229de0d464bbad1b03dd98b2648" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="22701f490629621cc4c58e2af5664a463e4c307585f1b21b24d1157eea1ee351" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="8f2e9e5caa887cdc4dc05c2bb8d4e35662c1c090f2b55a26c9208c111d06a056" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="f731e67a5890af29854956725d950c116ed0b5dfa978220b158d9cad6a70d4dc" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="2f097fa60e56a21a6d83041c033a90056c4723ebebe08b15354dd9e019f65fb0" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="13866f8d5e0751d939f95dfb5122be9f61e3d11c6dc928a6e20e77dc4ebba800" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="93376544d40f05cad3fc219c99dbf2b2620cb68bdc4f6a54a8f9b70dad213cc2" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="892057f55d61144750c8f741d84bea34cbdf230a37748979ba913bb5ecfc9a07" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="8da66532d0caaea9040e5e6d8d6e2fb1f7bfad5620169462e41b37bf6814e2c7" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="2fea93882f9be2948b06bf6addd57964f9f363f572a18011b50fdc14a7701d24" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="83656086dc9c7a32b24f33f6b9074a8a3f5813b55e16c66a64199ae9f5bbc39d" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="5c382f2c11da11dd1470fa9ee30562ff5f24099ee6df442e65853bc0ca3ad67a" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="a72c0ceffcd73282432c3c679c10a57992f4d16d311be1319597e189c466fd8d" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="6e46ba26d9949397437d238b9607cd7428840333118668fc93e8fc92f1b14de3" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="5ed5b2d3dd300731a0551424e47be68f1428c189c8839018f2afb4bc0dc0093b" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="a5b6715d98211f99c345e2dead726cab47a9a24c14fbc7d809fd650c5e86ea04" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="9078566fc3b228526f34c7d4540161ef18e4f1ee445b13e277af97140bc62a52" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="32bf83fa01de478834d4b55bb5deae37f883ea74a52802666537a5932575eaf6" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="737a141815387ff7fc1fd90ef41e68b3e97b540d6bd36bc93275acf339034c04" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="4948ce4ef7e65b001ef57936aa812b046e2248a083ea4b144310c19c8ba4ca67" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="6e65a2a6a0e84142255b6315579b5016b6c0ba2af5f68b7333de8f6eac56029a" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="a7daed69e9ab72101ed39a9d34a36f53afa32458c28150dbc0d57254d33babad" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="ba740af79018dd85db954e88f333f4e4a1c9849626903f911d2677825689c263" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="fc307d193576446d344228b3989ea895fa840f6cf892d1ea4514e4e0b01d9e45" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="2012f4d29eed0948199189beab7806ba836ebda1868f50457d214ccb6c05bd98" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="2e3f2044246917808c443d72ae032f18aad7e9f676d78b9bf1eeca56229497c5" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="75b009c3799edc0ee05dae01bdb2aa6735fd57b4b6d9aca3d526e1cc6067c43a" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="e033d5d1505d15985b85fe21cbf13069f458ac50d2a2270a6fcad60a3648effd" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="5d0ae126427339af40e6c4aefaa841b79a14bcad2d34d72f4358fd2c0f37df1d" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="0eb8b5617ef269bfbcd76699d463379d5a5cae8f3fc882153d94524c26b66821" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="440212b233e7fdd4bd6327df5b3ffdcb7b2c7fc347ee15008f10ef291a3681d8" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="aa4c2c8c472d823fc741d67da293f05fa6874351c5ac624de2832e3262946892" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="9eec475b121affde1065973b904a2b4bcc872ca3ae5b6d0f7494832c020cfd7a" name="perl" arch="i686">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="47b2462ef92fb1d88362a4c425113901e7c54115d15ba14cd086d13748f6f7fe" name="perl" arch="src">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="c75eb7ff457421f966d4c37819044cd7163174e9bbac330ee155bd46a9eaef0f" name="perl" arch="src">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="78a3464fb6ec99b31091dc38cb03b2d49d7e396e7808556bb098313e110a0bb3" name="perl" arch="x86_64">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="58f486f8f668be5c8c39332da85b3fb4a5d0af53039a1c11950611e49f632bb7" name="perl-CPAN" arch="noarch">
  <version epoch="0" ver="1.9800" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="5e75093af527f5dbb3a5acb596689b54401e4e39b5386ed33cf092ef7a03e89d" name="perl-CPAN" arch="noarch">
  <version epoch="0" ver="1.9800" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="f05956159d69bcd520fef3b3a4ffa08e053db9fb76ca7f4693c03b6fd91df451" name="perl-DBD-Pg" arch="i686">
  <version epoch="0" ver="2.19.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.18.0-4" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; 2.19.2-1" date="1331726400">- bump to 2.19.2</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.2-2" date="1339848000">- Perl 5.16 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.19.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.2-3.1" date="1345032000">- Rebuild for perl 5.16</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-1" date="1345636800">- 2.19.3 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-2" date="1345636801">- Specify all dependencies
- Move testme.tmp.pl to tests sub-package</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.19.3-5" date="1636027200">- Always clear out libpq results before reassigning (rhbz #2020111)</changelog>
</package>
<package pkgid="7f9d1b2b4fac63576ad91419f8e380486e909dd09ae2090c844ddcb3530f453b" name="perl-DBD-Pg" arch="src">
  <version epoch="0" ver="2.19.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.18.0-4" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; 2.19.2-1" date="1331726400">- bump to 2.19.2</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.2-2" date="1339848000">- Perl 5.16 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.19.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.2-3.1" date="1345032000">- Rebuild for perl 5.16</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-1" date="1345636800">- 2.19.3 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-2" date="1345636801">- Specify all dependencies
- Move testme.tmp.pl to tests sub-package</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.19.3-5" date="1636027200">- Always clear out libpq results before reassigning (rhbz #2020111)</changelog>
</package>
<package pkgid="54397661181dd052f91f68b6c6267ea8e239dda474322928ea4a27e6daadc462" name="perl-DBD-Pg" arch="src">
  <version epoch="0" ver="2.19.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.18.0-4" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; 2.19.2-1" date="1331726400">- bump to 2.19.2</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.2-2" date="1339848000">- Perl 5.16 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.19.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.2-3.1" date="1345032000">- Rebuild for perl 5.16</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-1" date="1345636800">- 2.19.3 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-2" date="1345636801">- Specify all dependencies
- Move testme.tmp.pl to tests sub-package</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.19.3-5" date="1636027200">- Always clear out libpq results before reassigning (rhbz #2020111)</changelog>
</package>
<package pkgid="52237d1909a39dd0825e87fadc7a7a376452296ca468a36fa6916c72c8366aa5" name="perl-DBD-Pg" arch="x86_64">
  <version epoch="0" ver="2.19.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.18.0-4" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; 2.19.2-1" date="1331726400">- bump to 2.19.2</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.2-2" date="1339848000">- Perl 5.16 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.19.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.2-3.1" date="1345032000">- Rebuild for perl 5.16</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-1" date="1345636800">- 2.19.3 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-2" date="1345636801">- Specify all dependencies
- Move testme.tmp.pl to tests sub-package</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.19.3-5" date="1636027200">- Always clear out libpq results before reassigning (rhbz #2020111)</changelog>
</package>
<package pkgid="2b4750a2f1deb973342b8927b5fb75712baaaba6346f876acfd80d85cfe7f75d" name="perl-DBD-Pg-debuginfo" arch="i686">
  <version epoch="0" ver="2.19.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.18.0-4" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; 2.19.2-1" date="1331726400">- bump to 2.19.2</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.2-2" date="1339848000">- Perl 5.16 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.19.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.2-3.1" date="1345032000">- Rebuild for perl 5.16</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-1" date="1345636800">- 2.19.3 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-2" date="1345636801">- Specify all dependencies
- Move testme.tmp.pl to tests sub-package</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.19.3-5" date="1636027200">- Always clear out libpq results before reassigning (rhbz #2020111)</changelog>
</package>
<package pkgid="7081577fe0dbce22e374345d55c5c231d9192c98b2327d73d31eb0577d35066c" name="perl-DBD-Pg-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.19.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.18.0-4" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; 2.19.2-1" date="1331726400">- bump to 2.19.2</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.2-2" date="1339848000">- Perl 5.16 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.19.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.2-3.1" date="1345032000">- Rebuild for perl 5.16</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-1" date="1345636800">- 2.19.3 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-2" date="1345636801">- Specify all dependencies
- Move testme.tmp.pl to tests sub-package</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.19.3-5" date="1636027200">- Always clear out libpq results before reassigning (rhbz #2020111)</changelog>
</package>
<package pkgid="db7d0d55d5a23ddb6925c882deaf9f95d6c65b81ceccbb5a0d775e3dbe6e96ea" name="perl-DBD-Pg-tests" arch="i686">
  <version epoch="0" ver="2.19.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.18.0-4" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; 2.19.2-1" date="1331726400">- bump to 2.19.2</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.2-2" date="1339848000">- Perl 5.16 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.19.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.2-3.1" date="1345032000">- Rebuild for perl 5.16</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-1" date="1345636800">- 2.19.3 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-2" date="1345636801">- Specify all dependencies
- Move testme.tmp.pl to tests sub-package</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.19.3-5" date="1636027200">- Always clear out libpq results before reassigning (rhbz #2020111)</changelog>
</package>
<package pkgid="16e6e69cc7b211ed57766c731e8287c1605338f7a1fcdd03b2a1f1515f949c52" name="perl-DBD-Pg-tests" arch="x86_64">
  <version epoch="0" ver="2.19.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.18.0-4" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; 2.19.2-1" date="1331726400">- bump to 2.19.2</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.2-2" date="1339848000">- Perl 5.16 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.19.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.2-3.1" date="1345032000">- Rebuild for perl 5.16</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-1" date="1345636800">- 2.19.3 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-2" date="1345636801">- Specify all dependencies
- Move testme.tmp.pl to tests sub-package</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.19.3-5" date="1636027200">- Always clear out libpq results before reassigning (rhbz #2020111)</changelog>
</package>
<package pkgid="8a0740cdcddbb404282ad4ce3eba668bab47d71b87b05ccea424aca41c14d1c7" name="perl-ExtUtils-CBuilder" arch="noarch">
  <version epoch="1" ver="0.28.2.6" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="d9a9af41bbd5a0d356647183a1bda6f4a704a6f8c56cdd57c97ca2c7de0a34b3" name="perl-ExtUtils-CBuilder" arch="noarch">
  <version epoch="1" ver="0.28.2.6" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="f0b625eec6d7f8f3153609f515c88a6937534d891b493f457a44c1a73cea4033" name="perl-ExtUtils-Embed" arch="noarch">
  <version epoch="0" ver="1.30" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="c675021f8c1ab8b611969a118b46e906b0ec3fee6b8c2caabca782da1c55dabe" name="perl-ExtUtils-Embed" arch="noarch">
  <version epoch="0" ver="1.30" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="dac95c91634734d77cec5a5432876dd5c35e60b93de2a85ee360ba371177ffcf" name="perl-ExtUtils-Install" arch="noarch">
  <version epoch="0" ver="1.58" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="0a1e2cd9d7946d157c805391657d46e4ac84c3b0a088bdf6da57813bf67c701d" name="perl-ExtUtils-Install" arch="noarch">
  <version epoch="0" ver="1.58" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="2e1a25d8ef3573bea9453deea88e4386056e9a8c787227ac8cba8604a470273c" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="5b245368ee478b7040ed4db65db068c64f4c3ae58268f039b4204b435d0b1c5b" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="de4b7acd58b9f6469981a174b98d0fc9076c00dde9e45c2854198fb7a74f26eb" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="5b6d52bc3d52f5a5a42403b519155b1507778559d9b66091c5c78fc0192f8b17" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="8880eb64dd13291c8ec12c9b1aa4edd1a56659fa59daf69ad01bfc768ccec244" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="999bd73a0693a53bbe74cbe2cb1fec68536b09a2ced8aca3c8175b8e3af0e50e" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="8a5542e8f58e1b86b2b43bbde1b0fc65219e1257c4d921ba80867f663fd2e4e9" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="6605391113dd02fe100f3f95fe9fdf5489c00a6ae1d799da662084cc91e05ce7" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="d66c2988f1e488b7e31a7f5130e67e6bb78896fcc28ffde7c22abbf06c371281" name="perl-IO-Zlib" arch="noarch">
  <version epoch="1" ver="1.10" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="9d0ef1548c954140605fb7abf811fb5eddf12b12f482e710e99879dd9861ce7c" name="perl-IO-Zlib" arch="noarch">
  <version epoch="1" ver="1.10" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="f7e44c8d89e94db9050357fa59c698838960d737ea8c780b1ea82beb93a33356" name="perl-Locale-Maketext-Simple" arch="noarch">
  <version epoch="1" ver="0.21" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="fcb9a9bdee1a793fed8666dcc78ffc1d6edc663a60bedb74e3ee95da53c2914b" name="perl-Locale-Maketext-Simple" arch="noarch">
  <version epoch="1" ver="0.21" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="b0eea777f11f703c62e827ad84df82c88c35d2cfd95257c0d863facc5d15745d" name="perl-Module-CoreList" arch="noarch">
  <version epoch="1" ver="2.76.02" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="3cbc589a672ce5809f3ac606bba5b79251bfd77a02a0e4b053ba4f5eae2ef063" name="perl-Module-CoreList" arch="noarch">
  <version epoch="1" ver="2.76.02" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="f510d3bc880954c034042bbc0f14fdb661e19656e11dba31c21a1ec9fa8cc416" name="perl-Module-Loaded" arch="noarch">
  <version epoch="1" ver="0.08" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="a21df1427b8d2482af38f0bae6dc0df49d5d4e09caa8b704884bd95e398c0401" name="perl-Module-Loaded" arch="noarch">
  <version epoch="1" ver="0.08" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="fc2128472de1a114e26323449b3fed5b5a046b667bbcc24e60f38d128950c116" name="perl-Object-Accessor" arch="noarch">
  <version epoch="1" ver="0.42" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="aec0de109c31b6fc8ba8db3fa697c38b6838e25c9b99f5e9e3db0825ecf6d9f6" name="perl-Object-Accessor" arch="noarch">
  <version epoch="1" ver="0.42" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="a03f9cf5c9c6c87479f4c2976a4054136e85211e7f8e7b7dd96d51a318db24d3" name="perl-PCP-LogImport" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="feeb2ecab0671995f07c1130f58a341177b43543f5202b5e22a4925e5230d2f2" name="perl-PCP-LogSummary" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="1347882038616c9b76ff53da88bbe28f853f914572e223339360a2456b7505ef" name="perl-PCP-MMV" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="664c547cdb4e3df3507825b19ddb63ff43250285175dbb3b50597a40bd31db80" name="perl-PCP-PMDA" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="a9caef00a3de14c65ebe18fec99f1d8060244016054cc1fd353d8f3f16cc4c95" name="perl-Package-Constants" arch="noarch">
  <version epoch="1" ver="0.02" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="236338596472cd0905634d481ed4a58968edd2b932b72467a4fcecadd2049148" name="perl-Package-Constants" arch="noarch">
  <version epoch="1" ver="0.02" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="37654d3ef0f135f5925f5817f5aeabd349cb6372457bd8d1262e0f43c60d1fb1" name="perl-Pod-Escapes" arch="noarch">
  <version epoch="1" ver="1.04" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="a2863d8a9cea6b3c16fde18ab75a543075df8165dd1e33b397307c1aa304b6b4" name="perl-Pod-Escapes" arch="noarch">
  <version epoch="1" ver="1.04" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="e1ee712c4d95ed7d343e49d15bb7db4e949b6522410b55364fcbe6ae3cd94a11" name="perl-Time-Piece" arch="i686">
  <version epoch="0" ver="1.20.1" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="7c1c37f5c3ee372dadeac024b0297647725f7de0765ea49f043e32d55056c60c" name="perl-Time-Piece" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="140345a856f34ee489a7ff85b6e489bb10a1912d630dc4d3200700ee0331f696" name="perl-core" arch="i686">
  <version epoch="0" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="2c8043dc4a4ddaac6be04aa64cfb9f4158d47df16180256827c51ffb0246fbd0" name="perl-core" arch="x86_64">
  <version epoch="0" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="6e81dc4e9919a5b928ce96128b1c453c0400ffa7faee15b568aebdbc10a88312" name="perl-debuginfo" arch="i686">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="d090ca3ecd255d1a5f6fd472eb55e8b16ddae517b2fa671cea3980d72be88f2c" name="perl-debuginfo" arch="x86_64">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="207bda2cb32eb751d620689c7bc2cb5ea80d4a4daa3548ca15d23b8de583c4f0" name="perl-devel" arch="i686">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="5c9d1549d7380b9f5c1b633de0ef0d3a58a89ea8812bb80b103c86c0e7b6bef4" name="perl-devel" arch="x86_64">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="db5a1befc81bf0a661b22e80d67ad4cc38f3ef4c0b4449b7526a133d819356a9" name="perl-hivex" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="e978fe26e891baa727cca2b51e1e34e058e3dde490e409f2e637ca6532f43ab7" name="perl-hivex" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="8ff04cdb33c570224ad390bb7fa5b5585c0bad244b887a5971a0eb6fa0091829" name="perl-hivex" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="1adca39d1013613a110d2dc2fb428b9f2d1951867c24fed60ea88416b2509654" name="perl-hivex" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="433eb90827ceb2f6f14f084e203ea8d689392c4b5cc44beb933094c391ed4b06" name="perl-libs" arch="i686">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="f0ab7acb558571efd5f20243d12903915a3ca706b46732b5c47fc75ac024979d" name="perl-libs" arch="x86_64">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="97de2210f01aa5b25aac82a6d88a0479245ea663ce01710d2889f9d54e7c2d6f" name="perl-macros" arch="i686">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="cac73a4c7c2d0cccf817b5d7148e4d8711698ea7c62f320b7daefca962208e74" name="perl-macros" arch="x86_64">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="e70d05afe7678f4b6b7aa77dc10d3e52e19c22be0f9625323fee1eeb1c31c4c8" name="perl-tests" arch="i686">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="8b11ebe4286c9d3ca3e470536d069e795487dcb62fef707832e79258e836353c" name="perl-tests" arch="x86_64">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="962432056d9f3adf55ee488bf996ec3c6a6a8dc264a14b064678f457b843c856" name="pesign" arch="src">
  <version epoch="0" ver="0.109" rel="11.el7_9"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-3" date="1382702400">- Update to fix a bug coverity found.
  Related: rhbz1017857</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-4" date="1383048000">- Tweak the signing rules just a bit more.
  Related: rhbz1017857</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.109-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-6" date="1395316800">- Make sure CFLAGS is inherited properly for -fstack-protector-strong.
  Resolves: rhbz#1070782</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-7" date="1409140800">- Add aarch64.
  Resolves: rhbz#1100042</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-8" date="1409140801">- Include aarch64 in the rpm macro
  Related: rhbz#1100042</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-9" date="1409659200">- Build as PIE+RELRO binaries.
  Resolves: rhbz#1092542</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-9" date="1409659201">- Fix man page errors.
  Resolves: rhbz#948850</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - - 0.109-10" date="1463400000">- Add support for /etc/pesign/users and /etc/pesign/groups
  Resolves: rhbz#1141263</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.109-11" date="1674043200">- Backport newer, deprecated pesign-authorize
- Resolves: CVE-2022-3560</changelog>
</package>
<package pkgid="4de9e37deb69507838b1d26ea94c8201b7677c0eea7ec3bdf6d1b3dbe175ddac" name="pesign" arch="x86_64">
  <version epoch="0" ver="0.109" rel="11.el7_9"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-3" date="1382702400">- Update to fix a bug coverity found.
  Related: rhbz1017857</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-4" date="1383048000">- Tweak the signing rules just a bit more.
  Related: rhbz1017857</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.109-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-6" date="1395316800">- Make sure CFLAGS is inherited properly for -fstack-protector-strong.
  Resolves: rhbz#1070782</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-7" date="1409140800">- Add aarch64.
  Resolves: rhbz#1100042</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-8" date="1409140801">- Include aarch64 in the rpm macro
  Related: rhbz#1100042</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-9" date="1409659200">- Build as PIE+RELRO binaries.
  Resolves: rhbz#1092542</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-9" date="1409659201">- Fix man page errors.
  Resolves: rhbz#948850</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - - 0.109-10" date="1463400000">- Add support for /etc/pesign/users and /etc/pesign/groups
  Resolves: rhbz#1141263</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.109-11" date="1674043200">- Backport newer, deprecated pesign-authorize
- Resolves: CVE-2022-3560</changelog>
</package>
<package pkgid="246e79166099b9c8c625f164ae00e01aa9885377f46f357847013c2e96564156" name="pesign-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.109" rel="11.el7_9"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-3" date="1382702400">- Update to fix a bug coverity found.
  Related: rhbz1017857</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-4" date="1383048000">- Tweak the signing rules just a bit more.
  Related: rhbz1017857</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.109-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-6" date="1395316800">- Make sure CFLAGS is inherited properly for -fstack-protector-strong.
  Resolves: rhbz#1070782</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-7" date="1409140800">- Add aarch64.
  Resolves: rhbz#1100042</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-8" date="1409140801">- Include aarch64 in the rpm macro
  Related: rhbz#1100042</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-9" date="1409659200">- Build as PIE+RELRO binaries.
  Resolves: rhbz#1092542</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-9" date="1409659201">- Fix man page errors.
  Resolves: rhbz#948850</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - - 0.109-10" date="1463400000">- Add support for /etc/pesign/users and /etc/pesign/groups
  Resolves: rhbz#1141263</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.109-11" date="1674043200">- Backport newer, deprecated pesign-authorize
- Resolves: CVE-2022-3560</changelog>
</package>
<package pkgid="a76e9016067eb2b7e326e41bf73c659f83ccb549e24d2c61e2f66065a20b3160" name="php-pear" arch="noarch">
  <version epoch="1" ver="1.9.4" rel="23.el7_9"/>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; 1:1.9.4-14" date="1355227200">- add explicit requires on all needed extensions (phpci)
- fix pecl launcher (need ini to be parsed for some
  extenstions going to be build as shared, mainly simplexml)
- add fix for new unpack format (php 5.5)</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; 1:1.9.4-15" date="1360411200">- update Archive_Tar to 1.3.11
- drop php 5.5 patch merged upstream</changelog>
  <changelog author="Ralf Cors&#xE9;pius &lt;corsepiu@fedoraproject.org&gt; - 1:1.9.4-16" date="1363089600">- Remove %config from %{_sysconfdir}/rpm/macros.*
  (https://fedorahosted.org/fpc/ticket/259).</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-17" date="1366891200">- improve post scriptlet to avoid updating pear.conf
  when not needed</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-18" date="1367582400">- don't verify metadata file content</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-19" date="1371556800">- add man pages for pear, peardev and pecl commands</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-20" date="1373457600">- add man page for pear.conf file</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.9.4-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-22" date="1586952000">- fix fatal error: gnu/stubs-64.h: No such file or directory #1720375</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-23" date="1663848000">- update Archive_Tar to 1.4.14
  CVE-2020-36193 CVE-2020-28948 CVE-2020-28949</changelog>
</package>
<package pkgid="b14d65e4309c29b1fe304736c3c23b6af328e81ae146c1de7ee69813000301fe" name="php-pear" arch="noarch">
  <version epoch="1" ver="1.9.4" rel="23.el7_9"/>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; 1:1.9.4-14" date="1355227200">- add explicit requires on all needed extensions (phpci)
- fix pecl launcher (need ini to be parsed for some
  extenstions going to be build as shared, mainly simplexml)
- add fix for new unpack format (php 5.5)</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; 1:1.9.4-15" date="1360411200">- update Archive_Tar to 1.3.11
- drop php 5.5 patch merged upstream</changelog>
  <changelog author="Ralf Cors&#xE9;pius &lt;corsepiu@fedoraproject.org&gt; - 1:1.9.4-16" date="1363089600">- Remove %config from %{_sysconfdir}/rpm/macros.*
  (https://fedorahosted.org/fpc/ticket/259).</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-17" date="1366891200">- improve post scriptlet to avoid updating pear.conf
  when not needed</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-18" date="1367582400">- don't verify metadata file content</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-19" date="1371556800">- add man pages for pear, peardev and pecl commands</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-20" date="1373457600">- add man page for pear.conf file</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.9.4-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-22" date="1586952000">- fix fatal error: gnu/stubs-64.h: No such file or directory #1720375</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-23" date="1663848000">- update Archive_Tar to 1.4.14
  CVE-2020-36193 CVE-2020-28948 CVE-2020-28949</changelog>
</package>
<package pkgid="90da880b39422963a5fc21f33d84c9504398fc11fe0c0f236d6a8d9d3026feed" name="php-pear" arch="src">
  <version epoch="1" ver="1.9.4" rel="23.el7_9"/>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; 1:1.9.4-14" date="1355227200">- add explicit requires on all needed extensions (phpci)
- fix pecl launcher (need ini to be parsed for some
  extenstions going to be build as shared, mainly simplexml)
- add fix for new unpack format (php 5.5)</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; 1:1.9.4-15" date="1360411200">- update Archive_Tar to 1.3.11
- drop php 5.5 patch merged upstream</changelog>
  <changelog author="Ralf Cors&#xE9;pius &lt;corsepiu@fedoraproject.org&gt; - 1:1.9.4-16" date="1363089600">- Remove %config from %{_sysconfdir}/rpm/macros.*
  (https://fedorahosted.org/fpc/ticket/259).</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-17" date="1366891200">- improve post scriptlet to avoid updating pear.conf
  when not needed</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-18" date="1367582400">- don't verify metadata file content</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-19" date="1371556800">- add man pages for pear, peardev and pecl commands</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-20" date="1373457600">- add man page for pear.conf file</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.9.4-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-22" date="1586952000">- fix fatal error: gnu/stubs-64.h: No such file or directory #1720375</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-23" date="1663848000">- update Archive_Tar to 1.4.14
  CVE-2020-36193 CVE-2020-28948 CVE-2020-28949</changelog>
</package>
<package pkgid="82df91068662df6cdb1c444d61bc9a22ce3c97851c0788bc27557dc9ece58b65" name="php-pear" arch="src">
  <version epoch="1" ver="1.9.4" rel="23.el7_9"/>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; 1:1.9.4-14" date="1355227200">- add explicit requires on all needed extensions (phpci)
- fix pecl launcher (need ini to be parsed for some
  extenstions going to be build as shared, mainly simplexml)
- add fix for new unpack format (php 5.5)</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; 1:1.9.4-15" date="1360411200">- update Archive_Tar to 1.3.11
- drop php 5.5 patch merged upstream</changelog>
  <changelog author="Ralf Cors&#xE9;pius &lt;corsepiu@fedoraproject.org&gt; - 1:1.9.4-16" date="1363089600">- Remove %config from %{_sysconfdir}/rpm/macros.*
  (https://fedorahosted.org/fpc/ticket/259).</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-17" date="1366891200">- improve post scriptlet to avoid updating pear.conf
  when not needed</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-18" date="1367582400">- don't verify metadata file content</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-19" date="1371556800">- add man pages for pear, peardev and pecl commands</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-20" date="1373457600">- add man page for pear.conf file</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.9.4-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-22" date="1586952000">- fix fatal error: gnu/stubs-64.h: No such file or directory #1720375</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-23" date="1663848000">- update Archive_Tar to 1.4.14
  CVE-2020-36193 CVE-2020-28948 CVE-2020-28949</changelog>
</package>
<package pkgid="76416acbcdc1356255d77a9f1cbe7192e0b47ec734741d2fa1d4751f30e36d0f" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="284d52f623f7fbf064f7bc56170a93fc61533a01879b984bd68bacda17262e4b" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="4482f1c863a4ba1cf27394381c98913c81d2e722f6d90ad8b304c102e6ae7d32" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="afa0c59e392e5fb5755683e4d1983d13574a5f1a5c5344e45f8820b1b2101866" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="65bd6535fb4c5bfadbeda18ef144ae1a49ba61b7153e44b6d090166ebf9f393d" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="d8849e807d65c46fe6e506d81688ac6bc481b4130f8a92883f3838d3ba0cca40" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="af72524e19c61dee4a55dcbf18adc8435b5883c1e1879f01c685b283c09bcf60" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="0b44d772b7c84539e3d8e95f3c44536ed36de9107231f82267d4452c8d93089d" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="e3e7d7001e44b613eba3c9548278aeb2f0da35ef44dad2a5fda8e870ea600fbf" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="a24a9e6e37c46b529de82056ea991a167102adabffb3af845f9e4e260e2670c1" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="18f1df312ca6556a064b19352d96214fd81f6c2e2c0cb7d4c302ef748b86c4d9" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="e5524dae8abcd69f66664f4ea95364c062cdc2d3b761eab8ebc5ae960ce02b0f" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="74ca9df4854689fdbb20d2e185ea57f52cb0a893f9408d7a0b653c0a40cd84c6" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="be221046970e845dcb54fde0a9a5d15c0b07d0994810dca2e92587e430ba28cd" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="cdf14bae67e75dcc23ff4da23458aaca442715b1f60758495105de2661b3558c" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="de01a0b5e2b3b6f696626c1472d2995c35b4291ab487c87dfa97d4c8078e5178" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="2a6d380dc4a60b677d69864864d5e0e9236ec0d97b43330d8ef4f96059213780" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="deef82f5960318b0621f3652891e6c0014b5412c1d64878ce3441e139f314a27" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="d7c109a9d51dfad9ce3b244f40fce0582e30ba656570c3b1b4b09d666f919f20" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="b412c1c34987b0f0f6558ebd5a58c68428a099e8af740046a43f68cbca25a4af" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="002695f8e9ebd95ee10d4c674fecb46ec877a480ddf73de9d0542269966feab6" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="8eebfcaa4f77a651d5aa1273ea203bfd0e9ea25a8fe94d72a2891b24e3e51950" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="609af847afb3d20015d10e979ccc73d98ad84ade9f15120c6412dce8c0375dca" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="071958ae7dbd51a5695d511a8beeed0eab5728c8f6b1b1996eb821183175fb58" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="d7b8f7d86decdafb85dce03228339120a5d088e81218f133bea12e2889852fd9" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="8cd26a79a40a23b99ed73615e4fe6c0161a801797852e605af8e62051a2c95e4" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="50f1a04774c016b3e7ab84dbf33cb0ba47e431b658a9f178fb07d12fc89757d9" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="ad35c174c6f6d6e61349063571d41a574e7afd1fc8d9ddafeec8ec63d605f440" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="4172a319eb10f7765ed7c90453f15649c6a932f5818309f4c8efd1b61fcb4421" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="485edad516a11e28cc0d962699c2a63130cff2d7390bd496011afd2c8efc0424" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="888b9a3abf3bd47c880c665fd8cc376860f2e91fcf41b0e5811792793efee449" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="a2ffda184c1f1eb8200fd1275f03d1f7e8a5c3df8cb4475dd2d362d41824db59" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="d5167faf3a99a39074bb3f40a4f5607ac51250db3196e03708a2f6491ba8c2dd" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="2532ceba653be71e1845c3b80a362f0a8ce6674911c6ac34a97ca3743bb104f6" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="ae0ef6560cedd9a7cbfb49387b5ec804240b0688fcb2c12f886da5da94e49f3e" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="98e4b1e69d179afae25e4a001eef87e9a2e1dc9c61489d575fff8c3a8ee635dd" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="2c1f2c7d939a96bf5fe12f2d1dfc618a4ce7f8e4cc5214e7e8b19f49bc79a0cc" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="98ba73b674404bdb36f8ec5c6d1a25c98c03ec7cac9c02a4236200bc1951dc63" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="aba6271ccb0e6d20dac2fa2fe4b620485a6c04df5e4ae818e1e31e2a50a90060" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="a040eb94faa810c9c94e40e147fb4b59e336ce58da054f032d50809de2ac4e80" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="aef99a58bb23ee8c3f49af9ad4b0d520f6afd8d7d7f91dda411a9194d2c6bc22" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="76196777f298e48a9d5764f9aeae964411b1839a26381b70149cfbde5a6f716b" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="7491091dfbb8f3794710ff76c3e4f9c89dcf170a82ad7888223d15ff1133f387" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="9ad051ba3adaad1e57c8631710517c617775b0cb0e4698d30374672cfc510ad7" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="da4828c9c6d3fee50b34c24987cc5c9367d07766c45c55182d45d154b848a1be" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="e1861c74f248541fc7f5cdc5f3cd3a241ed1c96b06ed0b96a55069c1ac4cc070" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="1cc3343d0d3b2cc26ea34e4284adad0236b3ad35eb0518f29af9ed1141245570" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="1c9bf6778de7d3e9c258e46b8828a6330312ec04c0547eac63065947c997d2e1" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="5765fb809944500d55e220b1001af8a20c11408cb318cc8881bfcd221ee553fc" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="44c5acd3e03399d82f4081a46fe438d8bd86dee2a5b893dea55b9445e1aece84" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="b2d08be984315eaa8cfb958d999e8bdbf79c55fcdfe301308fda893c056c5c56" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="978582d3a018afe47e4d99290061043516ae18888ce2cec5d081aa8af9e8afdc" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="957c04d59dc34e6f69a810685b51a624fc4dfc23f2b3a8fb4239e52fee029e42" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="9103fc793570bd8b70e316ae5403f220c4a6087cc7f22aceab373fc0ae3fe269" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="4febd6432e278e3f25ee26ba2dc0ae511f6faa63ccbebe903317eb043ac6273d" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="4fb022df7a414fd902d9863c240d51c1db3ab070e77ba07b8b5b7227f79299a3" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="1acc5f42bf444641230c41dc592a5d92c6b9e8ee12c25b05da3f00838fe535c8" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="4c25d7ec2eb4ec1375c93ed61ff5b88e09432d1c9652fc2918e9300136844ae5" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="35c9f2fb6aa37118b1ffc7d8c73bd80a6e162684a1295d6f1414fc9c81661da7" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="defe8ab38d6962390f483e00c6e431030c61b530378b7d8ecd5d2166371103f5" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="aed79b55051bb342c76892b16c37e5990b1aaa0240213766f70ed0574b7fa7c8" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="a8e54e9ab3be35daef2d4fe2b891055f3e938c8da7c7b695eb96a69fd1e82b61" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="3924fa6437f53a5c4850133aff0b25b06a522f36ca6228c627424606b989b30d" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="a57a6143022c6ca3258f66a225d2f4815eca168b31067785320803f0fb7d8cde" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="28d987e9afd3530db560b446d48ddf9251e1f1a7f1b24c7601452364470fc00c" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="2eb783582643998fabbdf47e30c7844616ef480e1453c06d442c530022db67ee" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="dbdcd2cd8ec50ba765d3d8bc2cd0c39d96d45b49a1d170d19e8e2fc7f42bf9b1" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="d31cd1012d54af724685a9efe52877072f95520c4ac3b14da2cfa8b0b03c31de" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="f8bc69d309a4f3c62f98ac899350ca2b865642387fceca23b3112df495dda358" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="5b8cfa03c2477243faf52e9c79e24190831b64587897f65f541345182705af48" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="140477fd4cfbee0af36d1c0a5443186fd8cebae0703c2343c5885768ae04506a" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="e2f63a92067d2d585f120742b429873414c9407b7eeae8a28ab18ec39df3531c" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="87e211e7b671b370364769317ed941b22cb7d1185f74371bb7177becdac36944" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="730a8e0a2e5363d6e50db33d3e07f8b01ebb6641c60b76cb0cbdd5fdf9494664" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="052816bb2d89455ea4572f1d6f745c2e476aa7d5cbd583fb3b78b50f8dafbf07" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="bcd30a0a50db5ccd55dffecf30ca04a701ac4388b318053c5e87a097dcf65c56" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="50d68c3be336ab0e7b3d357c70ca0990ffc52dbfb410634a4f42d3fc8450a843" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="47aea3301cf5c1fe557b25c329d6747d50b0a12c95a00bd8d4b6588b9f47b889" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="7ec7d38992193e2f4e63e46b8c124bc5c4a355fdd0fd8afcfb0fa9512510a111" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="9107b2423b92821edfc9b90ef47bffc7ce800b12301394cb6b55680c34e63410" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="378f151fc80a0401d8a0272d33d1f2dc668af22b5d54f7b1604fdc88500d9278" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="0714f4172341111f11984720afc30488c07ca2115d2cafeadc5d5520d6cbf9ba" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="51fae9935d1f258718cb5dd332f499cab56bd6a3cd72394ed7a589e566ccd3eb" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="54d52db65bb5da024c0398f007617d9903a062dad2c8e4e9f07dcddc6fdaef31" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="3b138876e4e703530489a9ff1123c5cc5ff5a2a608c84c7507471f0d1eb5ca4c" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="992d53fc68ee91fa56cead5159ed2868dc32a5d2a8629db0b7dc04107bbd54ad" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="f41925b0e003bf3a1638c6972fdc75e91560cc2a8ff4f3a873786e5541bd2833" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="74343f1a930bceee364350704de130f332e7c73ba481deed256fa660c61622aa" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="5342e943e8692b626057856c4c319e961f1fcb5005f58c626795a3fcc1c178ea" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="5e78e7f6ffed15faec2f3e229f9075f7f21315f2f46345e18eb62733e3bbb8ec" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="ee6254c7075071d0f46f6cf90a31821b5950b7fec70d7b8c08fd6036dd91005f" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="a428b03207644120250db086434646b4148b41294b14ef281e6e236e67f8872d" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="f0da57949bbe74ea77320e7a090674a3359816e5c8c1356115ab66d1982b31f9" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="c00a58a7c26c3d92a69fd08c864f16a365338088b186f2dbc408969dd9c1db5c" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="8945a87c1e712788065ba10ebd54b47884bcd4aafd36971e4345001039bab937" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="8dd3ddd8d6133e3c77d670a28b2b279ebf26f57513b52999a9e304692f8243ce" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="52e9b0e23a7283c29a71a34422b4c7c8c0fc4927b8aa5f3990aea5b42f1fc17b" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="7f4eb2e0e2d9a7c6053b469b5b9151af23cc9fa73b260016e976745ffcf36281" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="32e52aa223d42edee007f701e772562af82e20f04cbe442f14bd061822683dd0" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="12b9b7e9a7deba8c908bddac1da12113f1ee169f5df6da48b21aa06a759c364a" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="6c43e4d4b58a8709a13f8a92ccd2eaaf4733f9f5fcb5b17177d909ce31580582" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="4083787bee23dce2ac3006ea03c8366cefe6f75b3a499a2d0fc31d3fde0877be" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="5264278114fc87c56b523b478c551920198c8071d219cabd6b96130e7aca95ea" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="8685c3015fe1f4646945f76c8724c535c9c30fbe6564f26f5fcc73465863210d" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="6e895742e30b06d7c0c0a1e4633c3d770429b4669d476572b9e21654fd271c7e" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="f6b62189281017ff8f5499fc3f60d5f887e6db69b3840317397d87e496282fc2" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="ae0a8aa37ba821f71d326ab830235dd961b3ed8570617ed189afae864cbc09c0" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="373884a669b2ea2c9f4d30302bc12782f24bbbb746e449b30b44ab2fb40fdaa0" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="4114885c475ba7a6c1fd8f1c49c41bb336821f378d21d942e6b53c4b2665b464" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="6bcd07a12b07d7a5f2774bf53cbb4efe9727e12c83e222d75ba22710fe1ffbf8" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="bf7bbeda2fb9092ac244a664b73d812c64dc5d1741c119d043cc5c025dc13f9d" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="bb0556cbbf9bee2d22e5bfd136cd07f5a2a0c991cfa1cb4fc9642573b7869387" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="15fcb29b5a8430092417c29ce5c10f07eb9b263059ad738589f511dbedc3a3a3" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="f271620579703fe0ad5079884d0b082aa53598ef644e6350b4644cb1de9a158a" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="1f0b3d61b77bd495425b5ae4455bb95564d7a12811e60cfaf28af3de913e394c" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="e70b2e4fe797d41f6089d6880862157759833d62e0eafeb6436e3a3bcdb9bbec" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="264833419e477f3814b81d08ac7315b18b86986d7bb96050737f6667b6d0adb0" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="9846913ad8c1e36cd821c8c2a32385ae41ed3cad2494d3feb03cefb8daec57b5" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="29cce039a3dab980aa093df7366cf6ccfcdb0761be047156fdd31809d70fff2e" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="9087de5a21dec9ff82875b2becbb54c85a967dd017ea77e0dc12a54c934ab9d3" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="25947ab296c5f289c8b37e7e2d5f2800c916b55be89ffb4ea833c7466206d486" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="0f4156e660d1efe847702b40b6b38d06f44caa5a418ceabdc3f199060406cb21" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="4945915de3409e9eb3ad767dd0df9e7eb511392e96972daa5f7b3389a5c597e0" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="6f1419cdf661b4c9caab0b9ba72fe5579973b6cb7d524545bc4257adb6c18e8f" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="3828f96d29bc2bb6cd4ec8b45ac83dcbf3f7ba004248cab1e51b8cc8f02d4004" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="89a8a97e4d318cbb0d8b80dfcd8d65fa07b2436f606edf872316542657ffa3bb" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="9bbcbe919d87fdab41ac0bb6d12fb266aa5df0fc7c7a1844e3b954aa10646fcb" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="fd72792404ce6175e277ab40a1ef7e49b143222355fb6aecf94bfb4c720ef484" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="1db7168c2a054f2258a8f1d0e56c2ed95f41983715f560fe3926e19529a45d79" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="09ced9ce95263a7f74285e2fec2ef4401f7fbc4d208a138e605986a3edbd88eb" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="2a8ea3b862b5bd4c6025ad25964ec8779cc7a1888add0988589ac97b347f5a34" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="47a81406714ed171023f2e12f1f50e5d12ef5219c02bfda4f38e942ca7bec796" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="8e2cedfdf01d580af13f48460f6dd7fbc004c3051c2f888264bd71acfa7af43f" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="bcd33c7433f5d9896f272b470d0f5737412e37b353bea12c05223661f10930f0" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="68a0eb13207379897e4434263edcc4eeb60d2ae69dc9c4b9b8b1cc3f23a69ef4" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="b2178cf4292b65689664af20a7f1d776bed17c9f0a87f3552e014a8a19dd3ed9" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="93054eaeacf024524bafc2cdc5b280ccf74a99f41e2e4af78f80dc873f15b4a7" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="9f1b349081312b6bd807e12a783a32514dfec98d904b320f516727db6e78cc7e" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="72fa7fe8500400e7b8b8803c29a4ab343649711bef64d01aaca82d2664e4309c" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="a30cd64e5b423052f70f4072dc44bdc3e5e8c48cf688f7f3cdb407498c76f646" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="9df48109b816d8ee5a492850f28c806a07eaff0d723150ea6aad5f73bde8957a" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="e7f17595622f1b590306529d5fc0c7fb8ef3d1b964218ae77f3fea405477c6e0" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="ba6fd115d3be6ed7a0307ac544981213bd8b735051f07b58ed17ae11c2b096fc" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="4254c77e42e56485e086f90c20397f2dede88cb251d27b0e8de2dda6594610d4" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="8319ad4f264f00feb6eb50ef1722fdfb6401c3d1adeda6efc1c2718a8ff1aa10" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="1c6a9873a6a2b4ec3080a54dd8f951a5957bb74357d6990aa4b1022c7037dec9" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="f5ffc2c209ff0a9dfa4d31af74a339aa4e36ccca5b1440c13345e1d60a23edc0" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="7cecb18287ec413777a9305212a2552fee3c72e5a37650b8be611804b8aa2868" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="323cc1e3e7e035c64c7da15a75fbd129d98159c01f185beec447066bb7d971eb" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="c180a0cf192a2ef307b674a925d35ef3b0c7ca25b19f2e8fe32bdc62f8ca472a" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="0839508cb8d965fa32c78e58db17aabd28a8aad8f2ee87d67e6272dc3729f060" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="c6b1265e70e094b943fc46a91541542fb7dc9aadcb53a8aff92696d642f6b9f5" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="1ecca511cdb6c3b29b14f17e32a6d654dce775e266b430a46d378c7e829a454a" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="410188a01ca40e89a9bb2d2ad03c9c63ddacdcfc0dacfb76b646c7d7a29546fc" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="394827b6958cc6ddf1e340c6babe989250fe65c13c68b0ac1320f649d3b7848e" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="0fff28d26aea72cbac4df9d245e5c70058ef0289c83dadd7c60d4cf9c9ea3914" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="696b251c4e90fbf8dc6828bf34224384b73123a9ddb1b65e1caf212b12b5ebe4" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="1e4531e162e9a99c319cc4e9ece9ca330f2f447593447e696eb7dd523ff2abdc" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="ea84dff1580dac81da16b012cfedd5a7dd01e406cc5c3d25a504d4d539836a65" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="fd85ad0e2c3503805c808eccd92885d92ff371f957745c4c8ddeaa23db07685e" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="3e71f6146396a40853e51b72cbfe793b3068844dbe2540bae7bf383859a7c149" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="a92b2d1bb640e54b0aee03077de1a83598c56c52132f1ad84a786ebd7ac68fcc" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="18a665b171f2df96c5b7200dd5728926626a30826aeba21caf047431c27dfc99" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="7d81187744edef813f3464e5457c2cb35d322984a290f00eb8fd1f3d3f3b4bcb" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="7e387761692eebb1846d6b5741eb9815dc60f74726953106c5c2820252a9e06a" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="c2310c26899264275f381dcc04c013891f3d95d31e632821151d229549835e0e" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="2dc696b8516d477cf12acc39583377e5baa18a1db628d68692165c1ad2f9a130" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="0b1ba06fa125ab386f8e2ac7331f186c1edfbd44dfa7265ceeff68c7555d2bab" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="6787c0338b92972df501f31d7f525d3bf5c24efcc01e7adc249058602195cc11" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="577e70ece7856aea8b2320ea0772946e2c306bd1db25d36f90e7a7b9a06e3e40" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="9b78f92823e363fc754f6786be0e97867b683cadd1b17947edb595358c44c379" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="63ea8ab97ee2640723488ab9c5f4d434e29a080ade3dfb682e522bd9946e2563" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="99d3c8edcfc44d68e337f17932775fac08580bdf955c3eeeb944048bf4a1447b" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="a893919d42482b8d2deb9fddef9e259fd784adf34608f9f2db97712de78b2035" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="60167478a8434d8fa3a939dc37fd3dc9bc6fec8226d2dacd1717b0450a556228" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="38699cae7dc0f6685e5ef1c082354c1ce3a8d544d7ea20af225fae73a2cf309f" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="f43823cea63103fcd2e72c01261732cb05ce53f4e8c252e34306fe8be263c64a" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="169d550f957fb1b744d0fc5ed6a8a481db3a3019121e49c9a33e27b3c9d66733" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="6b71c3cb2532156ba887e0234317f49fbeec3ab0d154fe280c58bca96c57f77f" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="1d4e71839be1d7b27fa247cf635f3216c742a22f64e0832da1aaa221fd5cf340" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="406ebf95cb823f8c6af3c552a4710eee1c7e200a796615d931236bbc47f47a2e" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="bb36c53438104d461c75e67756f0de05b137e052f35ce68d7b9179e69ecd640b" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="debb76cef5fca1ced9505229d3afd426d2008ad2138d580043ac98d6610adb91" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="2d06e1aa2794637d47b7d019abfc73055d47559f3ce1569978f4da60d6324fde" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="57aea979d7925748e5f52a38755ebef965a73da7ef2ac9fb89b552e6f3ce92a6" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="54363a613f773d02d066847c24e4d936bb9729c5e5884990469afee54695a5c0" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="c39aae5bfec17e6c098e77dedce892cf5eca9bd2ab1e724b0799694aaccef566" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="da95a0ee4d35f90d7d5ca4359a188a2841fba640cf97ba4a1ffb0b506411014d" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="e3e8b87499a7f7cb73c65f34c5efd63f0840087fcf55144210d93b2e466e5951" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="e776168a143cc724d6409ef8ebe2229851c0dbde9044bc2b7fd056db110a98d0" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="ea578f09ddc8743d17e66c2b2f6bdc5542bb29a4da2fed612dc53cf5ecbd47c1" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="714769bd2bbb22733e7608e699a198e9770eedef7ad28363886a5d6afa69fb38" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="4e0fd9a97072853556b585c33dd6b8bfc2da94df3dc67fe7f0a26f2f61f08919" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="4b894e390e4154dd476ea97b97c31fe1949f0e9f2fd2692dd5ee30f289168305" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="e3bb8fc85e2fde36f0552fdd1deb4bdd9ecabfea774eb8f97a80241e6fc66228" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="30dfb14345b98210201012a271c170ee68c82cb26cfd71bc18760a6ca53149b2" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="6ebb2ee301782d98b75ae16254cdba016ad82e779151a914058e9cdcedce1e33" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="e06662f9e74aa1245170480ec8a744c35f0fd5db0b46854a34614958a0cada13" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="eb309bf016bcd2a9eaf0126ab3ce47c0a4bbda3bc29afdcf8dfbd2d1d419eb59" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="d7fe2c2f0cea8a6aeadf60bd1c6aeb6d41965b89534d719209dffc4961fc693a" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="b53e748c3183b12d2676846fc1cc5c62dea59f37f7bfaebf72bbf6e8525c84b2" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="d047c5903c1bedc09ccc9ab6d8d2686d22488fad4ff8dcab60b5840870156658" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="2ae558f1ba85b4563a6501036679dd61d48d456dec5a9de0c828b92482eccb53" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="37908f2f6556c1b69f8b870c06b0d8766cfd499e01d44aefc8284e494b5ad719" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="782891c1cf077c955f3553c3b9ed8ae0f158f3e5e4935b2557a7f78d76f467d1" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="fbdfb3ddd9176a4dc214653048bd9177677d417c29859bb01d765500256462dd" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="f455b23e0586eaa8f5917ebb79a2e2620159aff8ecd3a781cb2cdc7b4cd38753" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="7fb9f39b24bed1f50e8219b5e3251f34d4b9051292a02eab4bafed91d75be3d3" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="630d65b1bf6eb3947b2df2fd480e6204a386f500f94cd94818c4bee6b223ec48" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="4bb76433785120b86c6819602828b6818ee225c974c8047b9dee95e5f9bb9c69" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="bf4496308ce8b688e6d1b3baf210128681d0cabb4d9006fe334612c6cd705843" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="3f42c671406512d0c12c3a7892172e3b586282af19d723495008d2f2c6af633a" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="4c0c970cd2517163e44d7847cfcd034f21cfb98009d0f593452497a8f7b25fb4" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="cbc660d7b086f366cdb2fdd33c81062261968c7639f502961506039c3232f37d" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="6f653f541a02d575c510c09b9716e516937099ce60a8dbd6127f2a453947a525" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="7e2c412fbd59359221443d7b0d3fe5b0610b73fc47ebdb077000693b11223068" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="a9fd412fc08b0107ce776ffaa94490b4e9ca9cbb31b3f9832fe7a7fc9885cf45" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="dc74f8e98ea20f8a35ee0a96a9f99ff10f3fde52a49f2235ad3fc5e1a6ba35a8" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="6e1339ec76d09a9de4631bbe17f54f0490f07f5db89ca810a260cc4ad5ad7b18" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="ccc55d2c1012fe47d29affe4a33e054988a5e7553236249e8d86336628fab929" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="c0422c8ae2f14fa754604fef87a980b13b932dd53afb4c028a1d766296074f3f" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="fca5e1ffb32d3ea69e424f81311ad47492a4b50d87eb9fa43d8479ea246e7998" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="ecc2ab6f1e4ac9f83a65fd82b7bb6dfabf7519a77ee8580da465ba15ce442256" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="ac277e72c04bb65f8a5dec1779349e575da962ebf84d8f94b2c0e397d003754f" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="fe41a236cecd399e08341a71436c1696c05520d1a72ca380a37e2477fd690b11" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="6851f7e51f775ddb00afcaf6c6d2a9fd8be39eb845a58b65ea542e96f970e7b3" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="4127ec686d7b70a6d966fb4fcd069cf36944f24a16aba0d25dbfe2e3594e2111" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="23482fb0c1f683870655d6840c0493f31e73d46a13ab4d246e58a69bb9abd22b" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="3b18fee713f0de4105307fb52285e9753275c2ebfd6bf2c286aedf92494d57d3" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="d770877f59a1557df19a9d4d24770f86e5e21d1fa29cccf297ddce57a5d127a6" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="299194ffe8059264cfc29e2983ebc1c9be930867c2f45747a04a50d329f1e63c" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="6bd9628eff1de6b6303d18d78223da913b644d9ce1f04264c9c17cba9574b100" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="f1ae2fbf40bc0e44015828cb68bd98f02cfeea1edc4383db302e7a0cc5b013ca" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="40f90457e860ac622c069172909ab8d5dc4424d89cd60c2e73a9c3641ea23e6a" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="1c20197bcb4f20a0487e41e8f3005bdf157bc53bb2cac5f4f06e619058942c2a" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="5e58f3268a0ffd6f970df4c5149adfdce0e67d0e61b11cc88ae544b5ba1e2328" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="9dfc76e502d45a36f5973f832cc6a4d471f2ed6b7a30dc7bf50f3f767ada9955" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="b39e5cd4ffcb7741786d9b2a71806e53cc5b37e3bb304b185e731cbeb59e2ca8" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="8dc154ae35413c2459728e0026abcdfb522b52c8aafb285735333c8c6c514c72" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="9e6b6c09ed01c98e34bcabf99151da0d8a137f5afd64877b6b4046ba9dd0d0c8" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="7fafd18f27fc36f289bcb0de988fcb8016bb5d443ae43d6b3a57eb68bc9720ed" name="plasma-scriptengine-python" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="fa719175b392937d15818cf997d6b6fb9f8e7bd2361067f289fe8b53a74db798" name="plasma-scriptengine-python" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="10d25079e0e261e747c12f8f43a31eb40fa0944c4b3eddb98aaf2c7a6128c9f2" name="plasma-scriptengine-ruby" arch="i686">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="ae655d797d96ce6cfc4970a497088bb90db913c1b77a8e4e7d8241f1c4568640" name="plasma-scriptengine-ruby" arch="x86_64">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="f1bc4642769169209dbb6e3ff0c91e439afd3d8312901c03e57eb8854344457a" name="polkit" arch="i686">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="8344523c256e0f54ad57330d820e8b18902f465a4909dc4e22da93db9818db99" name="polkit" arch="i686">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="8ca7e15b7e97b97d9dba803934dcc876872c46e0327e778b3680e0a62b902750" name="polkit" arch="src">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="0ad8542c348843d3b8658ce481b86278f3df600b0ebee4db9c5dc1e2b9cc06ad" name="polkit" arch="src">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="ecbcd3d909069368e0c4b21d2567676c71c5a2cd90129dd8e9d4f61f97635f24" name="polkit" arch="src">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="c05ee0032f58311973a105d90794ff655e7c6baba084de6e7a7611300f048507" name="polkit" arch="src">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="dce16a84d6e597d16799eed001370774ac9d1ac31a9ec7670c2e97bc511ad9e7" name="polkit" arch="x86_64">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="2836dbffd9459b3492a07f2ba0c3612c6f11ffdc0ccbe870e4f70f78008695fb" name="polkit" arch="x86_64">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="f637e699ef530499085d24639746efdc2723f2cfd4479134f95ffefd33107617" name="polkit-debuginfo" arch="i686">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="bca1dc11dba1276785109a1c76096c13ca1eeaf5054a587d38c0004a70d510c8" name="polkit-debuginfo" arch="i686">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="f15cfa29b04297edb926c56500de08fbd711502b97b6d25e9070917a60d3697d" name="polkit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="9ef3d1fe07e20537210cc3bab89e0b64b0a600ebf8234570376959d8c8bda90b" name="polkit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="f744e96da38f01f27d9d79630f8f22406ccaa31f411f381fa7689b9c341a1a3d" name="polkit-devel" arch="i686">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="2ca895176b097b73b9ab91c723f266e2a9bfdae3afc7ed39fada60026a3d5621" name="polkit-devel" arch="i686">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="f6abc389a72a02d9ebcc78b223575c43b0a16dc76f608c0657ebb0ff5c304ecb" name="polkit-devel" arch="x86_64">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="b615902f0c4d314a80c576322faeb0d6d1b6439060bc8112ada893733e0ac9c6" name="polkit-devel" arch="x86_64">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="e6e93cfdd27bab1b9559adc1f9b54be6dd6989b91cccf304131d64f43333d7b8" name="polkit-docs" arch="noarch">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="c591f5ba4d317e8af4f778bb2251a2d16f93ff37cbe8b5220d4a41d0fc9451bf" name="polkit-docs" arch="noarch">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="001b4ff695ee1d1086a6296e19ebccf555cb6b615b4c4748c39aabc2f2634648" name="polkit-docs" arch="noarch">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="31fe5a2761c6148e33e4f114ceee15231577b5221ffd9fe14c2484f075f80eb3" name="polkit-docs" arch="noarch">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="84b18aa7af406ec209adce6f7e988c156927020ded207c8221aea54be5353416" name="poppler" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="a189499457c43196cfcaa2f8aca273d7d3aac42eca7256df0c87ade1f8b64706" name="poppler" arch="src">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="f9b72eccbeec411461900f1f6f21bc8cf8f9d663d6409fee902734f704baedc1" name="poppler" arch="src">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="6cf951218f55e22773020056b6ae54b16d0ce94f593298557e31927622806c5e" name="poppler" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="9ab3c0cbfa5aa83fc6ccbe7dedd89f4ef8e723a930e07ec615643d07afc7ad3c" name="poppler-cpp" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="0993527c8442196b97cdb719ce4b407641979306e42d4b7b6345eb01c4a20b1d" name="poppler-cpp" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="ca7a0cc5156f9623b69bc08f1be3e009e08dbf487905f852fd8bfb44d6fc33d6" name="poppler-cpp-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="c01c197f0b0a11431299b0cc772c2598137b9e84cc9ce9cc87e43c517bbe491a" name="poppler-cpp-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="cebab12dbf0b960958580c24f306e1929244715ef13da2b78522cc9523da0916" name="poppler-debuginfo" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="2d0f3f20304f7361b59397e346194b2a76853564f0dd9db4f6c99834ab879215" name="poppler-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="c37178dc0edfbc53cc736634c681c2f7d5e252d4d15da3998e6cc981b7e84d65" name="poppler-demos" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="43e5e109a90b2e95556e61a8ad674988e596426f3db5d3a3a14528b71f9db84e" name="poppler-demos" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="6fdda0a293675d15c01d07f875e5259aaaac1bd6385ad24b0562fb17c9398eab" name="poppler-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="29c80f3f715b42caca83f00af956c2a33c2e9dde86e792f700dc84ba8318713e" name="poppler-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="e5418b2ce0de203b6add921c5dad2711fa28fca510e7e210de8031b634f8f769" name="poppler-glib" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="503ab4faf84ecddc47018e141adf55196707c712cf81244b64a78cb8bda0a85a" name="poppler-glib" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="fa6731c508ada93e9ff950aceef8558889f12c30e37c670b08b97b88c6c81b59" name="poppler-glib-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="68a1a8b9582217b6db3736f10a34083a22d39dc271533cda77b0cd1eeedc5241" name="poppler-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="bca6f1f1aeafaef83185cd0291e2ebce688f3363aa6bc21357a02aae925a7137" name="poppler-qt" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="e6fbe263be357b9e43f00d4e63ffa8e288d8135dd03653e98d6f9e4be6ce63b5" name="poppler-qt" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="9ee223cd44ce4a3f3f588173e312e9ece0a035bae4d17f4849ccb6f7412c97e6" name="poppler-qt-devel" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="2d562f283b28e7894a8e4fa6c1ca079dbea297bc4a6c820b24e28fcba68a1a9f" name="poppler-qt-devel" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="d73adca74cacf6cae0c924a3bb0aecd6c64db2e1e57a5f760a63449b71a1c71c" name="poppler-utils" arch="i686">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="d707fa0feedfad63f44f50d48361f93c6a149b25eb134d54a83ab215566898aa" name="poppler-utils" arch="x86_64">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="aed2c09286aa3c7b00c7e6571ef4a2e456eaf1c155139bbff8cc9fe61ede5126" name="postgresql" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="7d4f9b894fe35df1c6bac7c64eea28c630d8d8399d733279f118512f6c1fc928" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="5a0e1c8ac110a804c7bda1f078f764e422caf3d7e9020c369d8a0663cd1c8ea0" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="8f096bb128e726ce03d1f08fa5424ab51190025615976719ce0c332b58dc660f" name="postgresql" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="22941d0c49a0b85c0e36955498ed295fe2a3f87a42c06d6688cbe811e16f4dc1" name="postgresql" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="d6a5d1a7cc118fb281505a990a5960cf4202a3f248f45ee737c9ba3dabdf0151" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="63499c160e8d050ceadcba7f7b70b0957106482590a88421750794c67ad32df5" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="368efa05a97c0925376f4f46740ed3c3949954b18be8068fe2764e4b857e902c" name="postgresql" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="cbc4f158df19745b78c287bc50d84834f04fe08a371de33bae3c429656ffc5e4" name="postgresql" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="619bcae0ea567481d188455b238e9bdd678ad75d459f7f5575a656baab6e6638" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="758e58ed55a49f63822586c645a437c6afd33534aac645b8d791a33b6641b991" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="a89fd50245d2a715365894633db0681ae6c51dbe8fbb4e21a2dddcc282838cf0" name="postgresql" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="a367acfac1837266a02d67fe4e82ee2dd23dcb95688fdc4430a8bb6fb2b79b34" name="postgresql" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="d92659d758374991486efca864a6e0090d1e11770b66147ddb2778a61584b39e" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="29f32cd021527744e0425e58920c9b49592160567c0c26df4bff738aba6ca500" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="d8fe9c194a3b02fc59f7aa9d1f31c55c1529e1e07c0533f0aa070168263d0cd7" name="postgresql" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="95c53e03767d0d897b505d95019b6e868b27c94d57b745faf2c9a23febb1ea6f" name="postgresql-contrib" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="b8c728ae8905aa021cb1d120768caf6ef6e2d24a1dc9535956d2a36997911a31" name="postgresql-contrib" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="122b09d7c69dc949373d5647f34467a1f7ff462390113669eb454f1a8173ee2b" name="postgresql-contrib" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="c512123f88081025632b8d25621fde1d4d8b9c88d7c850fb48005d506c0e053c" name="postgresql-contrib" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="6280164bd085071ff6d722cefdfbf700f497f096b20eeb9f769c444d66ad8e36" name="postgresql-contrib" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="3e095ced7f52b0ea7c8e14537120926a8a3f9e1b11afdb107c6606c7809d42e4" name="postgresql-contrib" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="e3cf4f600d719686968c99b5b756b77a64cf49224df992ad457a19979cf8b89f" name="postgresql-contrib" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="a8ca0d5c658cdc18b397181a94e411929f095b7330edd0c5cd3915abb07a2c70" name="postgresql-contrib" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="0dffad3d9ff7612813efe23f2bddc7e06c2a031426129cc2f47fecdbb21bee4c" name="postgresql-debuginfo" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="981ac01d4c69081aea4c2a567bb8524deb48a083b7916a88455c4f8460801a6f" name="postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="9825268c15cf5359f20f196e818f83c50273128d17ad90e2a77372fe92af8dbb" name="postgresql-debuginfo" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="373c7b2ea08b65694640329ab4c0352fb07cb69d6aa6cdd378393e5163af40bd" name="postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="d07fbe967ec2eef9459638a1325eb987e3975b489017586c2cb8baf6195455ff" name="postgresql-debuginfo" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="1604d0dd06398f4862cceaaa398c281e6c4c4cf355e2b0858854f97e3c510819" name="postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="1dafe6fd726325fa3c53a1a304888543cdf03285f4fdf445f2b0083aa8f0d17c" name="postgresql-debuginfo" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="6b0be64de602f90c39fbfdc4d25427bfb144d6eddca2a861a8a433c57c8301a8" name="postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="f681ae3082b48450d236c46d6dfc5fb4bd52fa5574dfbb116d31987e5b2590ba" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="238e4ef9c270b30a5a06f38754307532cb298d0f0dc56f2981905b78ab6bc28a" name="postgresql-devel" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="4da74f13a8901b95a698d3799d140701fc38c145c4e1a343b4f6fbce9a2abc7a" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="ea5925a1d93555913325a2262f69ad3b4a5b700cf9dfb344a103bdede2b865e5" name="postgresql-devel" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="259bd381179c98759ff91f59140682923c843a59546475ed04136b484ebbc968" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="98a109e50906ba0aa841fad4580474169846443e177828cf178326398eb8cddc" name="postgresql-devel" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="1b154f47c1ae7a2ab2580a20ca5546246e2e5ed83eea7ec4e000c8fca0db9454" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="e786fd9eed4eea076fa207653cd350ee4d16b24a5f7dde55f26151f2c68dec9c" name="postgresql-devel" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="b907766c8c5428a5b3dae4cb848228b0df98bf05e1a079f551601db568fafa6b" name="postgresql-docs" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="ae29130dfcbbc83d0f78eb4c77178263b53460360f2f661e7d90ceace3a5ef24" name="postgresql-docs" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="59ff03cb464a67a948b1725fbae2317986bef2e62393e231e2750a2892334dce" name="postgresql-docs" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="1dd115be63d05f50589f551566e6635af068a91b733601f4567a6d57db6abb08" name="postgresql-docs" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="67c8cf825fc3ed9618b5bfd8d090ada7d6c87029f9a1a896da431c9b60f66d41" name="postgresql-docs" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="a6b320da98ae377ee392d4dd7b9b7b49ce23abac3f2f6c2ce5964f2f049cdcc7" name="postgresql-docs" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="120e36265166538c55050e9e42abb3069db38d91e1d7c58ef056898ea00b8824" name="postgresql-docs" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="79e7986e8b6c418759c01c3e0696882c4cc7c8991fdccdbb1b5a80ef0221a92e" name="postgresql-docs" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="e236a1a3e2137a518651419396d9d8d749b5acc07975367908c09530e169ba3d" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="bcfa5913449ec3aafd1ef7c9c1a55dec93ef22076802284023e8754ac37675ab" name="postgresql-libs" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="e8a36af086339b5c4a5452e6567fa1f43ef11283cbf79a239d5a55829265e55d" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="09ac20c0adba72a0d49db7f30d0f3ae66c479d8cdefecb0d25a2eff0669b52e0" name="postgresql-libs" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="21c6099ffc1f26bc8a5d87e78b55494ff22e8b1346cc9438823984add2672740" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="e38a48afabc3a78aba67ea6d6e4835dc4346cf4f7446c3216d5fa066fb0d0e6e" name="postgresql-libs" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="202e2e166e7e973510540fb65758e2ad0a3d9d191881ae9f4aa41460a914f0a0" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="39d090621a0cb17fc236ac72a977e01057446a71f9f9c72c24b515c5c7d0f021" name="postgresql-libs" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="dd01707512dc207703266727799d8bdbd3b7cb7c072a9e54e6e1672b463a05ba" name="postgresql-plperl" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="550e27b5108d55b97c859d62f2e86aef12c626acd38d9a2d4ed55dc13b89732e" name="postgresql-plperl" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="a8d293266f539f06d16a65615bd55dbbf9b1bd22cef030c5fef2478ad7a5f122" name="postgresql-plperl" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="4cd8eb94a23327855f4bd48563e8a9cf8aec7fa0ac4927db5851ec3b1a71366f" name="postgresql-plperl" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="937f517f86f8e2546b44a1c3967b1643e07fc0fbe9da51680e7cdd0b1c0f0cf5" name="postgresql-plperl" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="3a344bb3cebc748abcf567de66fe791896bafc99826c16b943331155d4e9a587" name="postgresql-plperl" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="2fb800807dfa449500ff863f4452aa25b46c3944c3d4c0b17d7ad7b49723f6a6" name="postgresql-plperl" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="0d267d9b6b1640fdf5569f8949ccde53fdd8fa82d8656d372fbd838f362ba091" name="postgresql-plperl" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="a44d3d1d0b4762a286c55d94ec96c1fc696ad42badbaecfb328715037b30f859" name="postgresql-plpython" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="01122c2f5e1a39555815d321c1eae705c3ffe49d9a76f71d0e95e4b17e989c8b" name="postgresql-plpython" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="abd2ebb3c10019221a73a4f4482c77f248240c6829c09025ec6c697082ee1122" name="postgresql-plpython" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="08ea33b9b2b52f0c23924d04ed14f84415b329ff0393d79feac254926010fd1a" name="postgresql-plpython" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="d7fadbe9ff04fc255e89555bd62460443b630749ec7280737f7c8bbcebde9f4e" name="postgresql-plpython" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="526b84dbf97a5ee5269920934d270a65f058d1491136cac8a88b5e025cb27c77" name="postgresql-plpython" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="9037676c536748301b2c421eab7be868998758726752e28b27909ce92233cad1" name="postgresql-plpython" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="32680bc7e0ccb8664d9f70c6ae3dad3e020235638e07b6f4b1d474b3a6facbbd" name="postgresql-plpython" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="a7bba487eb46823a583fff3b2c5f642a3b3d4bec879b04725950de7808080032" name="postgresql-pltcl" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="19ba34dc1b7e2f7d2d072fbea92de75b92ab1a6f0057a82f40e0f51b6471e2d1" name="postgresql-pltcl" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="a1568ca015a473cde41c65588205377f7dfbc2a838a79b19bdc0e1a6eedae7a0" name="postgresql-pltcl" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="7bc1778922e76d7a949f3d310b4297e0decb2a24a346a6a067f19721c4908d5c" name="postgresql-pltcl" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="6452a1c4860f5f90f48bc9053b7b58daf698fba21dbbc37ff1eda765f19341c0" name="postgresql-pltcl" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="3ebf6e1e30c42d6e0a2ad7bd85023dd4f935dc6bf620b6fd94ab158d824dd830" name="postgresql-pltcl" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="404f7fdce44561ecc85752e6f951fbe39a9081e421ae0da7a0aea475353e43e8" name="postgresql-pltcl" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="f42625e16b9dd9f689bbce784bdc3271f89cb75017daf5ec56e19ca850fd57b4" name="postgresql-pltcl" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="e874989d48720cc41a87f5ba7c3d30310aca4de9c53a7610bb915d495e91aab4" name="postgresql-server" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="9373d02d69e6b3f4aa7bdf22cc878b9120fc65c84cbd9402e2259709caca0404" name="postgresql-server" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="d409a57259521736d47771b3d1879fcb68ad72071033be926afff14d22f6ab75" name="postgresql-server" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="b3a1675eb77073875e743b416f91b6752f8726d55ccfac9af20bd08a5442c329" name="postgresql-server" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="f444d022b5b4a4ea0202e728fce4325c2cfc74bcda209f5fdcbb434941705d93" name="postgresql-server" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="63a194f80cd168d114cab227cf70fbed60f059d5e9edffe503cffca7ea692528" name="postgresql-server" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="45895b434a73f95a53d556fcd00c8b49c6d8007a6db6f1156bd50d977025069f" name="postgresql-server" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="e9210f9e28a2686649d18078e9c1f2b40bb1bfc947d49f22fa5bc1568e8d5a96" name="postgresql-server" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="7a3f55b2c7282b8f1b55e183845211606dafc7ffff9845d26203eef3d607d9b2" name="postgresql-static" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="665e64ae487f213f5469f1ca54a8fe72c78b325c0111316defddde3811882a11" name="postgresql-static" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="09308bf59f02d7348543b1abb3cd1f8deceae2d39e08cfb9698445c53e93a44c" name="postgresql-static" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="85e97711d9134b8eae196727c43ca5ed43ea9920d3f7ab4f94a2963890daba5a" name="postgresql-static" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="023778225fce0cc7cc7864b976243306f67a4436484c728b85642d1c6cbc16ee" name="postgresql-static" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="319bcb5ebaff136d8aa420a3a583723460d1dbfa51f8c8c18c162328681a7540" name="postgresql-static" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="3ef09ca403981272d1d93ccfd1d3e04e74f487727fa03237f7beb1fff628246a" name="postgresql-static" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="0a2193729f4fa8bd53afc7689a7c2f1a2d6d5cd9e7b49511f12b52d5386753c8" name="postgresql-static" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="0971fd9387087bc81dc2abde51c45c0836d7f6c164fe60f1851f6506aba4bac7" name="postgresql-test" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="e73840f87da49bad67f80a0d35abac5ddb1ba66f25c6d4de805bb59a1fd10d24" name="postgresql-test" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="897f963542357391635359fc80ff1c18be56467ad90a7d60a72792f25d1fde05" name="postgresql-test" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="bffc27fc81cc7c4198926841f022e9f33dd9cd199e5dacc13c3fc4e34330376c" name="postgresql-test" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="887bd4fb92b3196ee252f9218c6725d8539734c32e8d4aefc2cacad251b168b3" name="postgresql-test" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="c1ec6d490f17e94cb05143e41970406e0b9466737f658578b734817c540f8980" name="postgresql-test" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="8cd082f921fbf9baecdd224a4b7c9d08292fef63547b03c5c331658e159e145d" name="postgresql-test" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="c721966beaed360a9775d78c805860cd16a6a65a416c431f2eaf543ee943952f" name="postgresql-test" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="d407ac57111437251d921495b2d630b88d2b0c5dcdcaedb863d1ead2ccc536a7" name="postgresql-upgrade" arch="i686">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="cec076846e88ac128469c87473713509ad6a0c237e61692fcb02191a68e5aee3" name="postgresql-upgrade" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="0ed082942ba502567416cde35f2050862ea1b2b3aed00bf02336a0d1624453dc" name="postgresql-upgrade" arch="i686">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="7799629e027ae7cd5b52b71aea7b0930a4a6d7c711fcbc840ed52c0681ce5f5f" name="postgresql-upgrade" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="6e145f607a9b710d86edf2f3b2d1f01218849cbad498605d3a80ec40304c2e98" name="postgresql-upgrade" arch="i686">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="537271adcf37d2f2f74e1b63e71bdfe5b507ee1503cae74c09645bddc10191cc" name="postgresql-upgrade" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="e6cdf165c050dae57ca60986ad6234501edd798e532403a35a6d88a534f9c20e" name="postgresql-upgrade" arch="i686">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="e89f03e8fc3b98e1a55d79a930465ae1509d170af3bef746a029122b8543b71c" name="postgresql-upgrade" arch="x86_64">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="533728c3b5ccfa7f639e0e9842c5426ebb1324e94dd4a248a16b4807ea729510" name="pulseaudio" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="e746f0972d8d1ef487d28f94a2444ef6205502404dd7bb1cac757c88cd5c359b" name="pulseaudio" arch="src">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="08a8ba170fa95fd183e1768b031b0a3a572c073e3f103f931ec18dd2ec1020a3" name="pulseaudio" arch="src">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="6550fb13a5dba530c86f759f95e145a82f22736b2491372982ae800cbffb6ada" name="pulseaudio" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="bb11b0fb19a1536e7526f6492eb71c308bf03dac706ebe5f052183f99dfd9c23" name="pulseaudio-debuginfo" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="b2f85bc733fb5db51e7ea626c874e9455f72626260f757449cae5d66846f4fac" name="pulseaudio-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="14273a0bfb722dbb4e7c6d90191146f60b3a8540ac651f296a16c91e09f913a8" name="pulseaudio-esound-compat" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="eacbde3bf1dd0dea639fdc81735d770f7c86d9d142255100a707cf895f015646" name="pulseaudio-esound-compat" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="695430a1e84ced1d3e88dc83c7f501817c2a51a49cde9e858d97bf580fc4a52c" name="pulseaudio-gdm-hooks" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="ba584dd5669b731fec355e596764b172a4588a758240a8b2b16e1b2464022aeb" name="pulseaudio-gdm-hooks" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="04081c9cd5c5c03ed8db5c3ddb859b766bb39c54973f198e422a6c5666b2bbcc" name="pulseaudio-libs" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="d716699e6d02f19e555777b9139c8c49e6c6d335bf5d264821db1ad3ce2410e2" name="pulseaudio-libs" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="2fab418bfb730c25f19c410ba582322090143a0fb2260f1255c3310af19ccc8e" name="pulseaudio-libs-devel" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="01701c2626526ddf6fe2384b4f7015d8b33c9744e5dcdc52f462404b47ede0ec" name="pulseaudio-libs-devel" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="b35183e79cb5d9c3c20e0640e4d5f5d69f4fe0c33f9c84f17d1481f91895dc55" name="pulseaudio-libs-glib2" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="ceb3691e95e1af8301ee772232c2727d073998ed075f6f5ae09de375e2cc99fc" name="pulseaudio-libs-glib2" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="3d07648e03f918ef405b03b1657e5b52993ce753837372fdb6c6ea832b109672" name="pulseaudio-module-bluetooth" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="2d4a498adcc65f19aec7f45be514e93eff1260ca7f62926ba07ff7a24681c7d3" name="pulseaudio-module-bluetooth" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="2ffd045d4884bdae3886c90f41daa21ad3ef2a049cf30708b10a6a571bdcc8e5" name="pulseaudio-module-gconf" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="c684e9adfd3aa0d70435281a43d3f589ec915eea945998f0420d60491a786451" name="pulseaudio-module-gconf" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="d5797c20844f29b57399a3544ff86b85d1eff97374fbee1c24d9ab2e014517bf" name="pulseaudio-module-x11" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="9958085eeebe4c7c445eb785a6a941e7eec1d67a54aa2245c309b4505d46157a" name="pulseaudio-module-x11" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="91974bdd793f053929af1866e4963c4ac2726b3622d271d409326336273f490b" name="pulseaudio-module-zeroconf" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="e5704a8abe6d10c472925432104db918dc3927dcb80c169b578fb9ec18950aae" name="pulseaudio-module-zeroconf" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="5547c935b9b489678183fcfb065635a6095c91a897b12620fbc98d571dd3303b" name="pulseaudio-qpaeq" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="1a80fc959024ef12e6293b4f33b6021869c7129be85bb79a82a40db74a66be0c" name="pulseaudio-qpaeq" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="e174cd5c137b54d2552c7b31b2cd64000167e7257c0f30966ae91dc870dcb419" name="pulseaudio-utils" arch="i686">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="fcf22508d0694ecaead3dc1601e4f885c27b484efbef36da43a23b6ce2f26722" name="pulseaudio-utils" arch="x86_64">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="8ae8c3b86f029c40f0c73cab0ea37e64087e314e4a9e2621fad4b9c1b0b77497" name="pyldb" arch="i686">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="c51fe093ccd4ff7a1d45b54092291c5e662f7f38cfe882dea33c63a8e129f402" name="pyldb" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="0d8613c0edd74aa72e6e15b550d78937ebaffe8e3968db660ad975bc3b480b14" name="pyldb-devel" arch="i686">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="a0372307783dac3a400c474d54301b04a103320973ce680d875ded63ffaa5b16" name="pyldb-devel" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="2.el7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="7b5601d43c75ad263224c7e4b2e4ecbfc8bfb99513cc8d94559534b1627c86e0" name="python" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="b1c6a39b796f1e9d68dc61cd87c7ef4233cb489e954d1f498a1a2fa44dab1769" name="python" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="7e8324c12a3d6ea70bce46b13ed3d32fad515e6b1254fba99ea0c07374f62213" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="800ccbfe1bc8b5e524c91380c53b24ebed2ecdcdbed85099a24d9f75d4075f13" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="9a41616d0251c9b9a2df4e3159b6540d36e1f14bdbdb793fb7db37632daf8e5e" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="c3eddad7fc67e12e438e45c92220748db3cfa72fd86972990739eacac34b516f" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="8f7dc5cb08bb155bbb7a4770cbfc0fbb82b591e744f627afdac3a000fe41bbfa" name="python" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="50748c44fb6a89dc149441a256a623b2e2f4d5a0993a7b4e8ac00aa2b3af0a08" name="python" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="6cb974377765b0bf5ef22f069fa26298441396424150eb04139455e92ff993ac" name="python" arch="i686">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="4a63361d4ac30e43112a61a3bb6fd9f88677e517dd29861ecbe26800847392fe" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="e84847003e31d35ffdae839c94c81000ae43f0d83a998de9e9f105c677d93ce1" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="35c1a74ec6fc341f9d221f9a044925c1d6984259cfab32899aafd09d7b52ed85" name="python" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="e6a4c6f5376120f977320c6f631c66075aaef2355aa2dad4c00345e4c2ce0619" name="python" arch="i686">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="2b02108596bc0399c636dfdc871a6c8eab305f3ecf702e2ac27dbeefa71c5267" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="a3dbff0886259368e97933fbaf954590fb255e7dbe5a1150a75a564d4bc2ca5a" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="af4dc7b4ca2db86b905eef4b5008fdc8fd067a3a5d2ea2a5ef865e2c93845e14" name="python" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="030ef146d6536eb299d25790afa0401cc4316c9e2f9f5fbcbcd0b73d62611bbe" name="python" arch="i686">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="0500f1282eb4f89589e7df23030d3a9eee7cb762c9c51336533da4032df8b712" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="9a29a332da2947ce2ef1855969fc4732c78bdf5a307dc8ea3c41cd4991a614c4" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="48804aedd942133e9bb8ef69175b38c1f735b3d793ed09fc8a15aaaea72b86c5" name="python" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="2498c6e6cd9b9ffff87422777064bc91ffcb5abab29addbf70ed6bc35faed965" name="python-blivet" arch="noarch">
  <version epoch="1" ver="0.61.15.76" rel="1.el7_9"/>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.67-1" date="1518004800">- fcoe: remove /etc/fcoe dir if it exists before copying configuration
  (rvykydal)
  Resolves: rhbz#1482512
- Find and remove stale LVM metadata immediately after creating md array.
  (dlehman)
  Resolves: rhbz#1223564
- Add ability to specify vg by uuid for vgremove. (dlehman)
  Related: rhbz#1223564</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.68-1" date="1518177600">- Catch lvm metadata lookup failure in md post create. (dlehman)
  Related: rhbz#1223564
  Resolves: rhbz#1543579</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.69-1" date="1519214400">- Fix accounting for metadata when growing lvm. (dlehman)</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.70-1" date="1529668800">- Deactivate incomplete VGs along with everything else. (dlehman)
  Resolves: rhbz#1554224
- Work around udev timing issues. (dlehman)
  Resolves: rhbz#1592253
  Resolves: rhbz#1592191
- nvdimm: don't crash on non-block devices (rvykydal)
  Related: rhbz#1280500
- Add NVDIMM detection to "addUdevDiskDevice" (vtrefny)
  Related: rhbz#1558942
- Add 'NVDIMMNamespaceDevice' device representing NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a function for identifying NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a singleton for NVDIMM namespaces management (vtrefny)
  Resolves: rhbz#1558942
- Backport DependencyGuard from master (vtrefny)
  Related: rhbz#1558942
- Ignore nvdimm devices unless configured in kickstart (rvykydal)
  Related: rhbz#1280500
- Do not ignore nvdimm (pmemX) devices (rvykydal)
  Related: rhbz#1280500</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.71-1" date="1532606400">- Remove dependency on libblockdev-nvdimm (vtrefny)
  Resolves: rhbz#1601557
- Do not try to load NVDIMM plugin on non-x86_64 architectures (vtrefny)
  Related: rhbz#1601557
- Add version to the LUKS format (vtrefny)
  Resolves: rhbz#1607830</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.72-1" date="1535976000">- Install ndctl when NVDIMMs are used. (dlehman)
  Related: rhbz#1600496
- Escape dots in lvm filter devices (vtrefny)
  Resolves: rhbz#1614039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.73-1" date="1553601600">- Use --yes when calling pvresize (vtrefny)
  Related: rhbz#1657000
- Fix typo in partitioning test cleanup. (dlehman)
  Related: rhbz#1657000
- Remove selinux test that doesn't do anything meaningful. (dlehman)
  Related: rhbz#1657000
- Improve parsing of mdadm detail output. (dlehman)
  Related: rhbz#1657000
- Update btrfs tests to use sufficiently large loop devices. (dlehman)
  Related: rhbz#1657000
- vfat labels apparently cannot contain lower case characters. (dlehman)
  Related: rhbz#1657000
- Check label format regardless of mechanism used to set it. (dlehman)
  Related: rhbz#1657000
- Adapt to presence or absence of python-mock. (dlehman)
  Related: rhbz#1657000
- Fixed KS forcing zerombr onto RO disk (japokorn)
  Resolves: rhbz#1544425
- Tell LVM to wipe cachepool metadata when attaching the cachepool (vtrefny)
  Resolves: rhbz#1643531
- Add dependency on python-six (vtrefny)
  Resolves: rhbz#1647173</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.74-1" date="1560859200">- Handle exceptions raised from parted.Disk ctor. (dlehman)
  Related: rhbz#1677383
- Recommend DASD disk label for disks with an existing DASD label (vtrefny)
  Resolves: rhbz#1677383</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.75-1" date="1565697600">- Always set default key size to 512 bits for ciphers with XTS mode (vtrefny)
  Resolves: rhbz#1716674</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.76-1" date="1601899200">- edd: Fix UnboundLocalError when trying to close fd in collect_mbrs (vtrefny)
  Related: rhbz#1879920
- Close fd if it fails to read the device (nashok)
  Resolves: rhbz#1879920</changelog>
</package>
<package pkgid="38dc640ba5f21fb5bd8952046d066ade4eafd30f8c0e5a725e8d8131c9132450" name="python-blivet" arch="noarch">
  <version epoch="1" ver="0.61.15.76" rel="1.el7_9"/>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.67-1" date="1518004800">- fcoe: remove /etc/fcoe dir if it exists before copying configuration
  (rvykydal)
  Resolves: rhbz#1482512
- Find and remove stale LVM metadata immediately after creating md array.
  (dlehman)
  Resolves: rhbz#1223564
- Add ability to specify vg by uuid for vgremove. (dlehman)
  Related: rhbz#1223564</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.68-1" date="1518177600">- Catch lvm metadata lookup failure in md post create. (dlehman)
  Related: rhbz#1223564
  Resolves: rhbz#1543579</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.69-1" date="1519214400">- Fix accounting for metadata when growing lvm. (dlehman)</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.70-1" date="1529668800">- Deactivate incomplete VGs along with everything else. (dlehman)
  Resolves: rhbz#1554224
- Work around udev timing issues. (dlehman)
  Resolves: rhbz#1592253
  Resolves: rhbz#1592191
- nvdimm: don't crash on non-block devices (rvykydal)
  Related: rhbz#1280500
- Add NVDIMM detection to "addUdevDiskDevice" (vtrefny)
  Related: rhbz#1558942
- Add 'NVDIMMNamespaceDevice' device representing NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a function for identifying NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a singleton for NVDIMM namespaces management (vtrefny)
  Resolves: rhbz#1558942
- Backport DependencyGuard from master (vtrefny)
  Related: rhbz#1558942
- Ignore nvdimm devices unless configured in kickstart (rvykydal)
  Related: rhbz#1280500
- Do not ignore nvdimm (pmemX) devices (rvykydal)
  Related: rhbz#1280500</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.71-1" date="1532606400">- Remove dependency on libblockdev-nvdimm (vtrefny)
  Resolves: rhbz#1601557
- Do not try to load NVDIMM plugin on non-x86_64 architectures (vtrefny)
  Related: rhbz#1601557
- Add version to the LUKS format (vtrefny)
  Resolves: rhbz#1607830</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.72-1" date="1535976000">- Install ndctl when NVDIMMs are used. (dlehman)
  Related: rhbz#1600496
- Escape dots in lvm filter devices (vtrefny)
  Resolves: rhbz#1614039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.73-1" date="1553601600">- Use --yes when calling pvresize (vtrefny)
  Related: rhbz#1657000
- Fix typo in partitioning test cleanup. (dlehman)
  Related: rhbz#1657000
- Remove selinux test that doesn't do anything meaningful. (dlehman)
  Related: rhbz#1657000
- Improve parsing of mdadm detail output. (dlehman)
  Related: rhbz#1657000
- Update btrfs tests to use sufficiently large loop devices. (dlehman)
  Related: rhbz#1657000
- vfat labels apparently cannot contain lower case characters. (dlehman)
  Related: rhbz#1657000
- Check label format regardless of mechanism used to set it. (dlehman)
  Related: rhbz#1657000
- Adapt to presence or absence of python-mock. (dlehman)
  Related: rhbz#1657000
- Fixed KS forcing zerombr onto RO disk (japokorn)
  Resolves: rhbz#1544425
- Tell LVM to wipe cachepool metadata when attaching the cachepool (vtrefny)
  Resolves: rhbz#1643531
- Add dependency on python-six (vtrefny)
  Resolves: rhbz#1647173</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.74-1" date="1560859200">- Handle exceptions raised from parted.Disk ctor. (dlehman)
  Related: rhbz#1677383
- Recommend DASD disk label for disks with an existing DASD label (vtrefny)
  Resolves: rhbz#1677383</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.75-1" date="1565697600">- Always set default key size to 512 bits for ciphers with XTS mode (vtrefny)
  Resolves: rhbz#1716674</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.76-1" date="1601899200">- edd: Fix UnboundLocalError when trying to close fd in collect_mbrs (vtrefny)
  Related: rhbz#1879920
- Close fd if it fails to read the device (nashok)
  Resolves: rhbz#1879920</changelog>
</package>
<package pkgid="0b71c8fb554f87b96aef2d88cd42c62ca9dd4e361f537b20106fe4faf28ae57f" name="python-blivet" arch="src">
  <version epoch="1" ver="0.61.15.76" rel="1.el7_9"/>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.67-1" date="1518004800">- fcoe: remove /etc/fcoe dir if it exists before copying configuration
  (rvykydal)
  Resolves: rhbz#1482512
- Find and remove stale LVM metadata immediately after creating md array.
  (dlehman)
  Resolves: rhbz#1223564
- Add ability to specify vg by uuid for vgremove. (dlehman)
  Related: rhbz#1223564</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.68-1" date="1518177600">- Catch lvm metadata lookup failure in md post create. (dlehman)
  Related: rhbz#1223564
  Resolves: rhbz#1543579</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.69-1" date="1519214400">- Fix accounting for metadata when growing lvm. (dlehman)</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.70-1" date="1529668800">- Deactivate incomplete VGs along with everything else. (dlehman)
  Resolves: rhbz#1554224
- Work around udev timing issues. (dlehman)
  Resolves: rhbz#1592253
  Resolves: rhbz#1592191
- nvdimm: don't crash on non-block devices (rvykydal)
  Related: rhbz#1280500
- Add NVDIMM detection to "addUdevDiskDevice" (vtrefny)
  Related: rhbz#1558942
- Add 'NVDIMMNamespaceDevice' device representing NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a function for identifying NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a singleton for NVDIMM namespaces management (vtrefny)
  Resolves: rhbz#1558942
- Backport DependencyGuard from master (vtrefny)
  Related: rhbz#1558942
- Ignore nvdimm devices unless configured in kickstart (rvykydal)
  Related: rhbz#1280500
- Do not ignore nvdimm (pmemX) devices (rvykydal)
  Related: rhbz#1280500</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.71-1" date="1532606400">- Remove dependency on libblockdev-nvdimm (vtrefny)
  Resolves: rhbz#1601557
- Do not try to load NVDIMM plugin on non-x86_64 architectures (vtrefny)
  Related: rhbz#1601557
- Add version to the LUKS format (vtrefny)
  Resolves: rhbz#1607830</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.72-1" date="1535976000">- Install ndctl when NVDIMMs are used. (dlehman)
  Related: rhbz#1600496
- Escape dots in lvm filter devices (vtrefny)
  Resolves: rhbz#1614039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.73-1" date="1553601600">- Use --yes when calling pvresize (vtrefny)
  Related: rhbz#1657000
- Fix typo in partitioning test cleanup. (dlehman)
  Related: rhbz#1657000
- Remove selinux test that doesn't do anything meaningful. (dlehman)
  Related: rhbz#1657000
- Improve parsing of mdadm detail output. (dlehman)
  Related: rhbz#1657000
- Update btrfs tests to use sufficiently large loop devices. (dlehman)
  Related: rhbz#1657000
- vfat labels apparently cannot contain lower case characters. (dlehman)
  Related: rhbz#1657000
- Check label format regardless of mechanism used to set it. (dlehman)
  Related: rhbz#1657000
- Adapt to presence or absence of python-mock. (dlehman)
  Related: rhbz#1657000
- Fixed KS forcing zerombr onto RO disk (japokorn)
  Resolves: rhbz#1544425
- Tell LVM to wipe cachepool metadata when attaching the cachepool (vtrefny)
  Resolves: rhbz#1643531
- Add dependency on python-six (vtrefny)
  Resolves: rhbz#1647173</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.74-1" date="1560859200">- Handle exceptions raised from parted.Disk ctor. (dlehman)
  Related: rhbz#1677383
- Recommend DASD disk label for disks with an existing DASD label (vtrefny)
  Resolves: rhbz#1677383</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.75-1" date="1565697600">- Always set default key size to 512 bits for ciphers with XTS mode (vtrefny)
  Resolves: rhbz#1716674</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.76-1" date="1601899200">- edd: Fix UnboundLocalError when trying to close fd in collect_mbrs (vtrefny)
  Related: rhbz#1879920
- Close fd if it fails to read the device (nashok)
  Resolves: rhbz#1879920</changelog>
</package>
<package pkgid="b2997f8a55315fc228e5158e819189011e5866bc56a3ef0e55fd61efad260694" name="python-blivet" arch="src">
  <version epoch="1" ver="0.61.15.76" rel="1.el7_9"/>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.67-1" date="1518004800">- fcoe: remove /etc/fcoe dir if it exists before copying configuration
  (rvykydal)
  Resolves: rhbz#1482512
- Find and remove stale LVM metadata immediately after creating md array.
  (dlehman)
  Resolves: rhbz#1223564
- Add ability to specify vg by uuid for vgremove. (dlehman)
  Related: rhbz#1223564</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.68-1" date="1518177600">- Catch lvm metadata lookup failure in md post create. (dlehman)
  Related: rhbz#1223564
  Resolves: rhbz#1543579</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.69-1" date="1519214400">- Fix accounting for metadata when growing lvm. (dlehman)</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.70-1" date="1529668800">- Deactivate incomplete VGs along with everything else. (dlehman)
  Resolves: rhbz#1554224
- Work around udev timing issues. (dlehman)
  Resolves: rhbz#1592253
  Resolves: rhbz#1592191
- nvdimm: don't crash on non-block devices (rvykydal)
  Related: rhbz#1280500
- Add NVDIMM detection to "addUdevDiskDevice" (vtrefny)
  Related: rhbz#1558942
- Add 'NVDIMMNamespaceDevice' device representing NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a function for identifying NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a singleton for NVDIMM namespaces management (vtrefny)
  Resolves: rhbz#1558942
- Backport DependencyGuard from master (vtrefny)
  Related: rhbz#1558942
- Ignore nvdimm devices unless configured in kickstart (rvykydal)
  Related: rhbz#1280500
- Do not ignore nvdimm (pmemX) devices (rvykydal)
  Related: rhbz#1280500</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.71-1" date="1532606400">- Remove dependency on libblockdev-nvdimm (vtrefny)
  Resolves: rhbz#1601557
- Do not try to load NVDIMM plugin on non-x86_64 architectures (vtrefny)
  Related: rhbz#1601557
- Add version to the LUKS format (vtrefny)
  Resolves: rhbz#1607830</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.72-1" date="1535976000">- Install ndctl when NVDIMMs are used. (dlehman)
  Related: rhbz#1600496
- Escape dots in lvm filter devices (vtrefny)
  Resolves: rhbz#1614039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.73-1" date="1553601600">- Use --yes when calling pvresize (vtrefny)
  Related: rhbz#1657000
- Fix typo in partitioning test cleanup. (dlehman)
  Related: rhbz#1657000
- Remove selinux test that doesn't do anything meaningful. (dlehman)
  Related: rhbz#1657000
- Improve parsing of mdadm detail output. (dlehman)
  Related: rhbz#1657000
- Update btrfs tests to use sufficiently large loop devices. (dlehman)
  Related: rhbz#1657000
- vfat labels apparently cannot contain lower case characters. (dlehman)
  Related: rhbz#1657000
- Check label format regardless of mechanism used to set it. (dlehman)
  Related: rhbz#1657000
- Adapt to presence or absence of python-mock. (dlehman)
  Related: rhbz#1657000
- Fixed KS forcing zerombr onto RO disk (japokorn)
  Resolves: rhbz#1544425
- Tell LVM to wipe cachepool metadata when attaching the cachepool (vtrefny)
  Resolves: rhbz#1643531
- Add dependency on python-six (vtrefny)
  Resolves: rhbz#1647173</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.74-1" date="1560859200">- Handle exceptions raised from parted.Disk ctor. (dlehman)
  Related: rhbz#1677383
- Recommend DASD disk label for disks with an existing DASD label (vtrefny)
  Resolves: rhbz#1677383</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.75-1" date="1565697600">- Always set default key size to 512 bits for ciphers with XTS mode (vtrefny)
  Resolves: rhbz#1716674</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.76-1" date="1601899200">- edd: Fix UnboundLocalError when trying to close fd in collect_mbrs (vtrefny)
  Related: rhbz#1879920
- Close fd if it fails to read the device (nashok)
  Resolves: rhbz#1879920</changelog>
</package>
<package pkgid="3f8b27c677b995993ef6685de008a5eda23bc602827991643d8e6e9a7f0634de" name="python-debug" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="8e9ed27e1e379b38a37d4b566485a896796fa2169637ecf79794410405da4b12" name="python-debug" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="002a10931ed762ea185314f615019fc8947da880ae04f27088316657afd37f54" name="python-debug" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="b6a35cf56c5a0760e07aac0aab37c1b62b67f8d2325adb397456fcbece12a753" name="python-debug" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="ca70d7324bf0fad8413928fc4868757c78605e18d654ab61740b358c9825b7a4" name="python-debug" arch="i686">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="9ceb96d7a628ac6e809c54189d2e300b40849da9d0217116d0443e62ea40a39f" name="python-debug" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="3e6c6a34f0248247354cc0ab0df00d4e0e71e3b90627845995d1dc5550897760" name="python-debug" arch="i686">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="ac0dea91164fa7cbd936f0b40ce8f6278e6e2281d423d29dfdd6c3fdcb264d5b" name="python-debug" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="b338116213997260ce43427c2d7fb821b169e059d429c70c4bb6ccc6ef17444a" name="python-debug" arch="i686">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="cfeaffe3ab5728cb4746bd174222bbcf8dd5b6e4b3b3a05616f1ea701656f42e" name="python-debug" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="bfcb40d591d37c57dac9f7d4180134413c22e8f49819fb64dedb58daa19803d5" name="python-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="b4b78070645afc2aada6e069ec00257c529d7a141df39d7052891b87622c1c8b" name="python-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="13d3ffb7c558f845a74cac466e6da705ddbd2bce3d301cf76d990cce6165ee58" name="python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="644b432ef7cbed9bd5ef9f57f23164538be1f9e3bd8b788bc1b75325bfb6ddeb" name="python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="d8c4c75aa5bbccd9b21fe709ff9c2afd4120d872875406f4ef9dd24bcaf68c7f" name="python-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="f5a3a2a080cebf66596931b0f75b9cdd73ae0cd15b5cece1e25d65c6ba3f60cf" name="python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="4e1662ec0f11ebe3d304b590c6d8ed3c579140e4aaac7ce17ea8fb16f4d77968" name="python-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="3fb476b2f2e753861e34f3a7c986daa59316c77299adcad8899e7d2663760d44" name="python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="1de0f7ada25bc867d091cb5f50ec6ba78aaaaf4fa5f839424ed869583cb4dc2c" name="python-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="3eb6e5cc407cf802f141ae62f66160d50b848b6c5a833cf9b66159b61a46e93d" name="python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="60a49ef11753d2d946def83b6b793e673a12b4bc585e847747d0396ba84a5892" name="python-devel" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="8a47d78340f219139d712f698fdcb6c0c94175606ee58eb3f1fa0c1df01792ab" name="python-devel" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="812245fbf45e352f658dad1eb147df5425fa5fcc0f1d72cf90f9b318eee57f2b" name="python-devel" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="bf328edc3da2345a74d97a576e978ddb1d54ed2adf2d60dcb6cde4ef469d3eec" name="python-devel" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="f37e06d43bc453cba143f9b23142564612fd687b753173bbe7ad14578221fc64" name="python-devel" arch="i686">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="514b5a5cb07c07d37d95e4bdc5e995cf708652b2d9c2e0ecb77c8120e51f684b" name="python-devel" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="4b81cfd4e71490d72bcc4c1145177e63d3bd5332fcc32afd91f12fea53a72317" name="python-devel" arch="i686">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="4213f4543848a61436fbbcbbff3c2d16bec25f9dd96a44a7106c3f0f6f3263ac" name="python-devel" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="c18f7d273afa0953e3faed295e99b3fc91e483205a42c43bb9118f80c063b924" name="python-devel" arch="i686">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="d8a6462d3915523998aba8cf9b1768e1cd478f2956107b17cc11f0a589ffce96" name="python-devel" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="ffd751f09d39916b973c8e3f5005de953a8f9b12340356e8cc02f9e20499d73c" name="python-firewall" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="87cb39c2e297aab46597ab3f16af37bd67cfcec9d7f66c65a7b9cf9859140d89" name="python-firewall" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="f6aa13286f4ee610e051e1198e860fc6ab3340e41b140c4d03b0f5905848ec2a" name="python-firewall" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="a5f3f9902c05e18daf935e4920c7a54404cf008e18e95e9aa28706e1728f9a66" name="python-firewall" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="9ff358eaabfc77ee1b2acf3f1b204b1c646ef0ffc15cc4e44fb39195380a9efa" name="python-hivex" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="74feaaec3bb9a3d4f6ddcb63a133e67baafd9dbbe1cb8351900d7b3d966fc210" name="python-hivex" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="4e6086bcb5789706c4d966af5ee2232b5283b60b105a85fa6d8d2c5895c30eb0" name="python-hivex" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="9410311f8d6b34a18439319a4527d9f45a73a1554d8023616afdbb291c004765" name="python-hivex" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="55e54a6b124a216b9ec3eb18382a70e8d29efd0d4d6cb811eedf65e719a8b9cc" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="fb6707b1efdc1055f2502079c85efc7bd7bf9e4eee3bbad17858cf18d382e105" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="9aec0a2e86775999f61eb5e7ba26a9cc64fc7af964dbb290faffd31d7c498d7e" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="55875eaa2a3d4f151222fa472ec082907a362819e3602d79d5223fee280d1d7c" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="5249c41d50c9a01ba97a2233f8d7d548e6784d85da21f30aea42b90033f5aa36" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="e9d537d24798a3714a98a39cbb17527a422c961f789543bd14e963eb0092eb77" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="38ef47b65f8ecd1f46727f40b47e5e2499027550131d41b96efbffaadf71dabd" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="54ace5a5ebe8782d71f193e9b7baa7143b2c7b1d5d80793de01ff97ed905047e" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="4ea6c96de548a2ec57ea4d39bae3ccc8881e52f87524472ca7396329dbacec9a" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="9c92163ade7ea8e87c254abf5e346cb3f018245f891c98201a8b49b66effc98b" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="5c67a98034953545d4279ea304e034601db011e73648bf0a1d0b739a4a69e68e" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="3dbb4aac05d5ec4ae165f428778da64db8b1f582639c65fbd5ee3659672886df" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="be1aa8cd8ff5b3f526eecbe34edc0a3b0feac1462da6d038ed4e55029b178060" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="149d73d00138339e9ffc83474a65755908d74b800fa668a58da82840d176eae5" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="05dc55c10f15f9260f8f64d7d14c335488f3ca581c57dd8eb5f9cc3f6900811d" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="b8bc09f75c4da1fabb85a20974a7a87f2b7c66746129db20471f7ea1b1fcc152" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="cac295e9953b6b9ec4f9884949409971ac461cccc05ec97eaf3aae4bd66b5632" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="c15c6ce2e8d61301a9293508db5e9292e019649c06f457a0f20704751261bae8" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="f447890f517a0920650102414661b238823d1518fe835ed257b9ea36f1b33734" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="f24e2d4ed6ba2f49c7a36c6fb7ac883c4260fd6f2a238a1a447fe88df98cd299" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="37ca393cadf7ef9a0d9dda488f51893f81b37893853149ca8d66d9a2620f9925" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="2f14178292b5d20df12466433169be6f74c5d2ac748799708c42c3efcd024f77" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="a8a188e3fee0733a565929c9734e4dbdcf04be201bedcd43bdb3e60ba743fdab" name="python-librepo" arch="i686">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="92257d51539909ed401c44b04ba7a518c1ba34c963d8a019b1c4188ed41e47df" name="python-librepo" arch="x86_64">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="fff2a46da040423f8c34555d0888e75f50219c8f94ea3e002b42631515156acb" name="python-libs" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="c3192da24c324c92a2d825a8b8de3005a975707790610229da746596de7e7163" name="python-libs" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="92535f880fec314399bc101a05f6ab4f997c2a15494691fdf7237c3aaeafba9c" name="python-libs" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="7b0f43cea50f0aa001543be771a1d1f2d9c4c620785770979258bc7102577b95" name="python-libs" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="ce56222f61eb78f42131ed032533d7812bfa33f77c16a970b50dec5ae6f06287" name="python-libs" arch="i686">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="d7fd1126229f09f10f1dc013871e432002931d3704187b852c81e3c6887c2075" name="python-libs" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="5f0f798ca43300d7ec6f35f0a736b08c8692edcfb2a73ba52a030ceee998ebf2" name="python-libs" arch="i686">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="ae5d9996c9b5cad708d4c45011cc676b78e45aa7e234b3b4406e9d8227f59379" name="python-libs" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="fa6db6bb3b0cbaae194891683077591cae372f6478aa17fd0711e0f266455326" name="python-libs" arch="i686">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="e32bc3452387859f0b1c5992e0b8fdf644d74a5fb58d6b918189ee066144e0aa" name="python-libs" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="e87f0fab357fa7787513c936bbba093363d9da376b10a339df92c5940f6550d2" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="ad97ba5aadd6a5ab30627ff6717db864924098aa9be3940ee9bb1325c0b79189" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="3fb39f2c544bad1b1671265d3eb976ad002dd72f209b4565569fc710e49a41ae" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="274a287fdba4cc1aa29b52081edcdf65fb03e91d18e80e3a8ebd3ea05ad21a56" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="f4057273a79e7efd57ea82f47510ac28c0f09951af6fd914af5333d38ec56779" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="9fcf6a8ecac5aafa0a552bb71390f1d838ee81892ff8e991772e29f87e3f1fda" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="fe332f001d1fce04e2c512b07a208f283902ed179d68edddde4dbef29874dba4" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="b89e06af5d3560d699caa60c9429ce7ff2b3bd59668125f843c8ac5908f0420e" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="bbb91a9cef0760ee40be4e53974759321995636f9a47515f8c4a295e45b494a2" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="0bf4ee0ed77844d2ff242e1f30d6317ccf46c9afab2c3894b1bf5fd1d4a6edbe" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="7355da5494eccdb982e60169b23853f694d8947aba8711a8ee0cb0050cf01517" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="04438f8abaf8bff82e34beea398146d97583a4e9fa86aea9248f1fcbe79ee247" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="24f8769f8fe8ad6aa3a242c1e36e68262eef5d4db29318de78ea9d3656e20d26" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="2eb2ae7e598f457790b3fd41d3e4a0b5617280b6030ff1b00e67248c0d03238d" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="afdecafcaf230e8f3346253b4ed08ff9a5a08adad69ba2e03d71d52dcf7629e7" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="e696b6070b009d6d6e3a62f3d55df024eb503b248cf0d127864730de55421f78" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="6ce4fee0cbf9f40776ca00d8107b681f90860d1a24b8ca9b3933e42836f0b655" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="7797c7056e669947acfa9b9ecffc8c22787202e4c80aea84e08792afab0954ac" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="a6ceea1c53e75fb309bd845cc9aa02fb2e559bf8e8b36b650c1f2fad240f868c" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="66d49a7840a9d405dab2dcdf11abf89e7fcfe7510d2581f273af1673d95f5494" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="4b8e4ad6d9abd596ec437df1390d1e566455c574569b43ce2333df8788967cc2" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="9481bbc4637eff04265306ddc36c53faad0671b3745beda5c8b5056efa6a16a7" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="6fbb24c16e5bf1015aa15d90351e63596e15cd9464b5a90d52456e5e248db760" name="python-pcp" arch="x86_64">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="d02711c5e8e792da216cf489c1df1ec772a87cb830f4422009f2aedc58639d62" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="7b3b3f4d79e6b46f1b2ec8320b863bf0f72973620b1d431c80740273a7ad46d2" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="85483be93465c6ec9e982888ff7a6838f5d195ceed2710ff445a2dd3e7466d58" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="5e3d60fa83cb301fd8a4bf01e160ae5443a281b62399687b0c7bb1b40caff5a1" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="2596675629dc916950e1890713fad961d2c453257de619f04ce584fca9eeba9d" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="ec28069a634d5f94318851f44654eb3d27d5468d85af4590a7d0493a6b8581e1" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="6164271469f2fa0b8554b4c30a486502e1e6d36bda7aa37e58aae3abe324415b" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="96ee2fd02384b4951cfc5857dec202c817d4cc18a59e36c2fefcb8d6d68e6395" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="c2ec63c04331e3c9b9709e0546099ab215c3e054eac7e35553a7ef05c7b309d8" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="8a4c30f42c4d12d1fb38b1320b828a32a7da46db5cc9017e131d4bb07bd87bb1" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="e81fc45a1229c29a951ac00d4680e38882861015c79921afdf15c0e9a677f469" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="f9b92340c3985fc39fc6f7e1f7b2d34074361425c114a3c3b6bd65e72e6ff140" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="39ea04507d58475f3a1462f1137291649af164efae23dde8538e0f35f730372f" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="f31982eb618d752dd184b8f58cd2a0991ef73d0a7620acbde4636487c16602e7" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="97c35350059152857627083fd5cd4819f0bd72e243b5e1afd0db6a15795244af" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="26e094e5f98625e2ddae1e78595c5ecc7dc418bb3774c31ac96c06d6f6704c37" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="29ba4dd6637325837e8c82f668e351c45d210dda718dbce4b8ac5e6b2a2f0253" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="242791bff334f09203f5de9c8a73428a298bf9d319eb0d61fadfb19b7f3b8b39" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="b64a13b553e8c5048801439372406ad12ff741bb95d024888125f54fec8cdac7" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="a4115f69a4358bb395a3615cf417e8e3cdfd0086b27b12ff1cd71a9a36422130" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="53ad5776aa68e2244d15111f76ca8962c6ea5672b23747a8111331ce96338eb6" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="7fca468b83e160e16508b3f92d9031afacb0017fee0bb9948f5bb9d1c6580469" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="c765e0268d0c9d15d5eacc6b9d45a376de60ec2d3818045e56d61cc903e686cc" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="8732af557325aaf29c10a00081b364ac87181367c6b6ecc6b46d4f0a4df76c5e" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7db6e8f10225ce9cd0fbbeb034e8eba82e40b03e01034e82651624124443fd09" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="3813394d0ea6a2d4e98d4d68f2f3110e8d9183631a131efa7a71f954a724cf56" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="cb0069a9e1266a58a17e84616fa1e0510283002c870fec956d72b1cd062ebbc9" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="ae1e63e79e859d925f981ca759d2510a904808761e52caf1617ae07ec6979c58" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="41d22528f4b146ad34f581175986349386e3d57f38040fc3add7451966829640" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="f2793d900fa89c838119e9b7dbc2c94dd7bffa7ac299d39c10d8d30088254a5b" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7154b30288a9110cc4f716fc70b034c1f5876f88422d0bb3ee6db305eba908e4" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="d70f3980d01a37ea8914ed3ca117e5d6af8c8bdfc403ff6ced1254f898caded2" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="21645883d9548c2eea8a2f2a0e9f339210c8b84622dad2173e264b4a884bc656" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="29217cc28729e799b3391667ad375136ae2b25a18f631862e08eaab7c019edbf" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="8ea07e783b4c2c9c3b508898b15a3f93b95d4ee9cdd55e7dce7bd710c872666e" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="26d20d6bb2bf2034dc46a2dc3628b8a443b2bc9bd1a0a4edb78b80a07f9a170d" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="ae3bc26fecdef72e83a7a9f2b73e4bb06e506c37d474968bffd2eaf488cdff2e" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="6798f146ed27cba59d36f704314603e12f08fb21e94ef41505a858455391730b" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="19fd7415caccba16770ab920bfbd28cd1c52e45c12271e158b81acc6ba68da68" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.11.1.el7.centos.plus]" date="1608033600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="0e842b9d647ef4f71562eb5611c84e8b93773cb78235581f2e82d7b1b5a2705c" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="cfa489f84c78a15dadae318223f261031f322ad476a53e660ee1b6cce971dde5" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.15.2.el7.centos.plus]" date="1612267200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="1bfe3addfa334d296e6feaae679e2391c66a2611dcaa32859626c5dc19b153b2" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="7bc5e433ff4af98bf57a2753c65b1aa71449f120f35c48d665c20d7dd45574bc" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.21.1.el7.centos.plus]" date="1615896000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="204814c74cd93c6802e1d928c2c6b3ded0c9dd3d2386ca55cf480659ececff82" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="10d744eba8e44c033ca5d8657e40fa8f2fd09bad2bacb3dfe2b4639443a8e033" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.24.1.el7.centos.plus]" date="1617710400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="067d3bf54722c6b3e970f276cbfed6b08bbe12d4549aa8a642cdbb83deacd77e" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="f70cbf946f43d969cb85c358cba2d2a27ef69d6caa2c6ca31b746df37a1fd891" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.25.1.el7.centos.plus]" date="1619524800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel
- Apply patch for hyperv_fb [bug#18117]</changelog>
</package>
<package pkgid="5ea8dffde8f040ae813bf88c03fd630d75d5dfd90a489c5b594d4f3a705f1276" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.31.1.el7.centos.plus]" date="1623153600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="017dd89136d135706452e70748462452b2c44d3f189bbe340f94d7cca0d79507" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="946b59ce4e6a72a3bc156c3657e31a16ff23433c4fda0ed59112d8d67637b601" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.36.2.el7.centos.plus]" date="1626782400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="1307de3748d661beea9692418f490bb14b419e8e9a444f725e690421d40f87f2" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="9e9b7af7e277ec0a536a9321f2dc12999e57895006c5cd07f812a72916da1109" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.41.1.el7.centos.plus]" date="1630411200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="da557595844ccd5465364e29b00e4167aad389a2a668b6d2ddc8b555a283f9f5" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="b44e9be8fb99b63f68c3b1520a1a3dec94cb4e49a3961b740a45728a29c337ad" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.42.2.el7.centos.plus]" date="1631016000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="854f79ea46afdd06e8ed3c065550f16d51b809eebef7bcdeeabd781b2671afa3" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="7c7ea7c0f127348a78352b99c759ca7ce5e663a9c18b630c1ba8851a52c9e8ce" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.45.1.el7.centos.plus]" date="1634040000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="e22e467f77a4153092abd06dd457c3fa29de73dc26e0a940677119a77a1057ee" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="803bf010206ed52f1248bd738cad421eacb23adb196bd5e740c7a7389b5b6563" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7.centos.plus"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.49.1.el7.centos.plus]" date="1637668800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="4f265b85a6667b5878b1f5b5a587ac1f842c51d3af5008c33c0c874c9942ac11" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="532ebf0cbd2a07275144577fe7b6d8591dd513dcadc3591b47aea4cf7ee9dca3" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.53.1.el7.centos.plus]" date="1641902400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="4b5b24d1d16726a6977ba993bdea124ca64a9aff2d0e9f97a048b6692086cbb8" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="3de972cfb9111ca0e90e7def8f97a54dd843261679039ebcb1a6d8b9277179c1" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.59.1.el7.centos.plus]" date="1645531200">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="7b8234ea8675e8dc61a5fa5ee0d0031c8a9355ae3984ae48e5ad6a64cbca926d" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="7296b3dd08f84f1ec3214d12c8990e4d6353d2cc738ce4c6b1083eac2a7c99da" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7.centos.plus"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.6.1.el7.centos.plus]" date="1605009600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="783efcd37d8d8ec29ffce3a196825d8b384e9cf111e1b73b3fe323da80249c2c" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="42e04b08fb3dba6479dff3cdc58716190a444604d7ed11bb8924f0ac03db4fc7" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-1160.62.1.el7.centos.plus]" date="1649160000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
   more 686 mods for 7.5 (-862.11.6) [pgreco, bug#15174]
   Patches updated for 7.6 [kabe, bug#15428]
   Patches for 7.7 [pgreco, bug#16324]
   Patch bmap [pgreco bug#16610]
   upstream-32bit-fixes-7_8.patch [puias+bug#12412]
   patch-i686-rate-7_8.patch [pgreco]
   patch-i686-mce-7_8.patch [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Add a patch to fix race in virtio_balloon [bug#15216]
- Add shim requirement to the spec file for x86_64
- Apply patches that fix ecryptfs issue [see bugs #7369, #15353] provided by @pgreco
- Add an i686 patch to fix Hyper-V issue [bug#15374]
- Enable NIU and add a patch that fixes build errors submitted by h-masuda [bug#15040]
- Apply a patch to fix cifs [bug#16824]
- Added a triggerin scriptlet to rebuild the initramfs image
  when the system microcode package is updated. [bug#17539]
- wireguard added
- UEFI disabled in 32-bit kernel</changelog>
</package>
<package pkgid="28d3eae0213393ec633360d91596055b0463466db3659829994f5485899d5d81" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="f0b55cd1fd3747f0c92bb3a6356ebda1106125641ac2a85aa3526a5f9bb9cdbe" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="ef63f1e30b48c231f5c5a1e6ff90d9f43d5aebc27da746e73b97a60cfcb59758" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="0af079a3cfa6dbb3ab25f4c534218e47dff5947ae9501ce2a9ced7d9885c8d28" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="595c01f74386dc6e9b59de3cfeb6b338242a567962505c3282cc9b0dad6295fb" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="e4538131ff886ac38c020fc56b40c5d8e94380117f6fd32bc88dc97423ccacf6" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="976ff52c9c1d68cc64f9ea2f43e0fe5b252997203c33494f72ea2d2f147232ee" name="python-pillow" arch="i686">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="0accfe897fd9b21627e62283e35c447bbb9231bf662cacb74a094a13a4bb22cb" name="python-pillow" arch="src">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="cadd18001e5dca3c747ce9be54716204e83e391c99bbade6ef92037b253c7446" name="python-pillow" arch="src">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="78ac6b467cd75870ba3b74ee1a3b0289682818841967dba96c9e09feb3e51fc6" name="python-pillow" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="f772eafed48175b2533ee4dd02fbe3404b9b5d61ba4b92cea06cb8e41103a01f" name="python-pillow" arch="i686">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="98d714b8b98053220b966085df4c666ccce4db90e371e7e316b971c976a0b9ce" name="python-pillow" arch="src">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="5198452e6f0ad1acc32cbcb6fbd6e371d8ba1f300da547b08be85c3324789d31" name="python-pillow" arch="src">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="988f47b838753d17ef35fecd79abc819be20fe7af1c43eeeadb53ac4b6aa922a" name="python-pillow" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="75c427be3e31e6af9d26ea4915ef8e4d0ecd03a7bf10e2dea9cef8ad9a1e4dc2" name="python-pillow-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="869a26f21b557171703169fd96b8f4013187479bfcfccc12704f62fd3d29fcad" name="python-pillow-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="c52c6dc882b1d2ae93a8b634f572190a762fcae3b88670ddb13f188d860d82a3" name="python-pillow-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="aa789bed907ff4f5635aca036884d2ee8fe9e42b5e64c53ab91a510e88fc9bf9" name="python-pillow-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="b449942d2e3ccdc9990de7a5f5305ba40cb8ed160406f494946e2d2746ef22ed" name="python-pillow-devel" arch="i686">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="1f7ffdd7f04c5a597cbfa60d4427c964051522f9cf4f1302f381a41aeef4ec19" name="python-pillow-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="6f81a257873f3819090e4e33f4af17f3ffa086cf7157b8d138204595d906683f" name="python-pillow-devel" arch="i686">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="94937f4ae2a45689381932bae83f6aaedc7f8a9fb2c2fbdf11ee2f58e604df85" name="python-pillow-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="53fcb83168352df82c32b817c38b5704c1b56b3b412254ebd8872e657973fdf1" name="python-pillow-doc" arch="i686">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="25001af94d34313688df6155873a0a1c4bf08cf71ae79a96e3c0a73dea1018b5" name="python-pillow-doc" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="ff3ce114223449b893f5936249a5377448ddb69413b6692c83513ab3c8f65a94" name="python-pillow-doc" arch="i686">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="75e44264c994acacf63c0c8351b0949fc6ccafc8ef3bbad31836cd56d9057071" name="python-pillow-doc" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="c16c598dbd0ab1fd836809d40273cd79ea4e9ea9b44446010e2c72013cdcc849" name="python-pillow-qt" arch="i686">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="37268c995e4ea8a8677c554d3d55e5d4190f63bb60494b066c8ce27c4bf831ed" name="python-pillow-qt" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="d164978895b73d8fb43e2ea7b7fc23f3f0dca414e1d0ded41767b4dbb5c79963" name="python-pillow-qt" arch="i686">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="774e708e9a207666304d13bab6f60af973c3645e9d0527fc8060da81f0b68fc7" name="python-pillow-qt" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="4b8ea45497f2de1de2d957d811ba491b090fa7acd7067b91299af1d7005bf565" name="python-pillow-sane" arch="i686">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="7274999531580e8ace30a38ce53ec8ceea0ff09c4adcd3c227448ffcf4c13a38" name="python-pillow-sane" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="e87c304d56ac366527bb01767c6bbe9d1003469504e7e4321a155a1e9298b3e8" name="python-pillow-sane" arch="i686">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="26c7c7f8483b8dbc824ffc80549f4e7d521de894a7e6df8282ceb17c63145096" name="python-pillow-sane" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="6ddd359c05f61315ca06ff1acb80859db28911f040f2320ab72d5798946e2df6" name="python-pillow-tk" arch="i686">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="89b217ac25dc98f37d889f302a583d92444a84a0a587f1213ab9ba91d5428a93" name="python-pillow-tk" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="e534c5af0f1d66513ee374e2e856fe0e6332e5c26a3280863a01527d75f737d9" name="python-pillow-tk" arch="i686">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="85d77f888e42df86db87f6ec1623e3d16e5ffa9b8220ce04d76877173bb355c4" name="python-pillow-tk" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="0abded57bffc2b782347db2abe07a037fd15e5f9c43bdbeee9461e8e11f9eeb2" name="python-rtslib" arch="noarch">
  <version epoch="0" ver="2.1.74" rel="1.el7_9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-13" date="1533729600">- respin a new release to avoid problems with TPS tests</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-1" date="1548763200">- Rebase rtslib to upstream version 2.1.fb69</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-2" date="1550145600">- report the correct size for partitions</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-3" date="1557835200">- save_to_file() function breaks symbolic link when saving configuration</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.72-1" date="1585915200">- Update to the latest upstream version</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.74-1" date="1602244800">- Rebase to the latest upstream version</changelog>
</package>
<package pkgid="4398b27d445e448ea0e841199417da90fbe284cc0d69c9df598e4df2e38166c1" name="python-rtslib" arch="noarch">
  <version epoch="0" ver="2.1.74" rel="1.el7_9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-13" date="1533729600">- respin a new release to avoid problems with TPS tests</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-1" date="1548763200">- Rebase rtslib to upstream version 2.1.fb69</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-2" date="1550145600">- report the correct size for partitions</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-3" date="1557835200">- save_to_file() function breaks symbolic link when saving configuration</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.72-1" date="1585915200">- Update to the latest upstream version</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.74-1" date="1602244800">- Rebase to the latest upstream version</changelog>
</package>
<package pkgid="7547f70a684642677230f3196d4dbdb49e54585f073bd58bd29653e1f958ac5e" name="python-rtslib" arch="src">
  <version epoch="0" ver="2.1.74" rel="1.el7_9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-13" date="1533729600">- respin a new release to avoid problems with TPS tests</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-1" date="1548763200">- Rebase rtslib to upstream version 2.1.fb69</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-2" date="1550145600">- report the correct size for partitions</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-3" date="1557835200">- save_to_file() function breaks symbolic link when saving configuration</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.72-1" date="1585915200">- Update to the latest upstream version</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.74-1" date="1602244800">- Rebase to the latest upstream version</changelog>
</package>
<package pkgid="d2397dc88032c07808bd084870cb6866f1f6cf02867e89a97b379821d161a105" name="python-rtslib" arch="src">
  <version epoch="0" ver="2.1.74" rel="1.el7_9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-13" date="1533729600">- respin a new release to avoid problems with TPS tests</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-1" date="1548763200">- Rebase rtslib to upstream version 2.1.fb69</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-2" date="1550145600">- report the correct size for partitions</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-3" date="1557835200">- save_to_file() function breaks symbolic link when saving configuration</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.72-1" date="1585915200">- Update to the latest upstream version</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.74-1" date="1602244800">- Rebase to the latest upstream version</changelog>
</package>
<package pkgid="aeb93c605910bf3123d6942c043cc418062b70e85575c1759c8d6fc5ef7c4dae" name="python-rtslib-doc" arch="noarch">
  <version epoch="0" ver="2.1.74" rel="1.el7_9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-13" date="1533729600">- respin a new release to avoid problems with TPS tests</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-1" date="1548763200">- Rebase rtslib to upstream version 2.1.fb69</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-2" date="1550145600">- report the correct size for partitions</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-3" date="1557835200">- save_to_file() function breaks symbolic link when saving configuration</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.72-1" date="1585915200">- Update to the latest upstream version</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.74-1" date="1602244800">- Rebase to the latest upstream version</changelog>
</package>
<package pkgid="7e79946afcc09561fc2219ff6033e5a8c916f5568afff56969fdb147396d93c7" name="python-rtslib-doc" arch="noarch">
  <version epoch="0" ver="2.1.74" rel="1.el7_9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-13" date="1533729600">- respin a new release to avoid problems with TPS tests</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-1" date="1548763200">- Rebase rtslib to upstream version 2.1.fb69</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-2" date="1550145600">- report the correct size for partitions</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-3" date="1557835200">- save_to_file() function breaks symbolic link when saving configuration</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.72-1" date="1585915200">- Update to the latest upstream version</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.74-1" date="1602244800">- Rebase to the latest upstream version</changelog>
</package>
<package pkgid="87adf344f354763cfbbad1c1e13fa6d9b765fd62c72e845a4610143b9d9e0f3b" name="python-s3transfer" arch="noarch">
  <version epoch="0" ver="0.1.13" rel="1.el7_9.2"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.5-1" date="1475409600">- Update to 0.1.5</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.7-1" date="1476100800">- Uodate to 0.1.7</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.9-1" date="1477569600">- Update to 0.1.9</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.9-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.10-1" date="1482926400">- Update to 0.1.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.10-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.10-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.10-8" date="1518436800">- Bundle python-futures, python-botocore and python-jmespath

  Resolves: rhbz#1509441</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.13-1" date="1527163200">- Fix "python2-s3transfer" from EPEL issue by adding it to Obsoletes
- Rebase to v0.1.13 to fix missing "max_bandwidth" issue

  Resolves: rhbz#1576985
  Resolves: rhbz#1578083</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.13-1.2" date="1645531200">- Upgrade python-botocore to fix IMDSv2 support

  Resolves: rhbz#2050751</changelog>
</package>
<package pkgid="7af49f5ebcdaa0c75b3632f21731c22941e82d64d70c8db9277256249f6d9d17" name="python-s3transfer" arch="noarch">
  <version epoch="0" ver="0.1.13" rel="1.el7_9.2"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.5-1" date="1475409600">- Update to 0.1.5</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.7-1" date="1476100800">- Uodate to 0.1.7</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.9-1" date="1477569600">- Update to 0.1.9</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.9-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.10-1" date="1482926400">- Update to 0.1.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.10-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.10-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.10-8" date="1518436800">- Bundle python-futures, python-botocore and python-jmespath

  Resolves: rhbz#1509441</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.13-1" date="1527163200">- Fix "python2-s3transfer" from EPEL issue by adding it to Obsoletes
- Rebase to v0.1.13 to fix missing "max_bandwidth" issue

  Resolves: rhbz#1576985
  Resolves: rhbz#1578083</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.13-1.2" date="1645531200">- Upgrade python-botocore to fix IMDSv2 support

  Resolves: rhbz#2050751</changelog>
</package>
<package pkgid="7e1e13cf308bde3190aa0f302b0568192dec0bc01fb7ae495a0bd0014e51cc3e" name="python-s3transfer" arch="src">
  <version epoch="0" ver="0.1.13" rel="1.el7_9.2"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.5-1" date="1475409600">- Update to 0.1.5</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.7-1" date="1476100800">- Uodate to 0.1.7</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.9-1" date="1477569600">- Update to 0.1.9</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.9-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.10-1" date="1482926400">- Update to 0.1.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.10-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.10-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.10-8" date="1518436800">- Bundle python-futures, python-botocore and python-jmespath

  Resolves: rhbz#1509441</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.13-1" date="1527163200">- Fix "python2-s3transfer" from EPEL issue by adding it to Obsoletes
- Rebase to v0.1.13 to fix missing "max_bandwidth" issue

  Resolves: rhbz#1576985
  Resolves: rhbz#1578083</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.13-1.2" date="1645531200">- Upgrade python-botocore to fix IMDSv2 support

  Resolves: rhbz#2050751</changelog>
</package>
<package pkgid="7dd84883e16a2c62ef2e40305300fc49f04ab8ab65cde294549f44686fd43836" name="python-s3transfer" arch="src">
  <version epoch="0" ver="0.1.13" rel="1.el7_9.2"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.5-1" date="1475409600">- Update to 0.1.5</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.7-1" date="1476100800">- Uodate to 0.1.7</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.9-1" date="1477569600">- Update to 0.1.9</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.9-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.10-1" date="1482926400">- Update to 0.1.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.10-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.10-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.10-8" date="1518436800">- Bundle python-futures, python-botocore and python-jmespath

  Resolves: rhbz#1509441</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.13-1" date="1527163200">- Fix "python2-s3transfer" from EPEL issue by adding it to Obsoletes
- Rebase to v0.1.13 to fix missing "max_bandwidth" issue

  Resolves: rhbz#1576985
  Resolves: rhbz#1578083</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.13-1.2" date="1645531200">- Upgrade python-botocore to fix IMDSv2 support

  Resolves: rhbz#2050751</changelog>
</package>
<package pkgid="8de85ad5d3201196d334cb02927f6fc6b69c875229b42a3580c8012313e10673" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="2d8311617146443365a20a8fafbe10e0633231f8b923c135335369182257d8bc" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="c7687da00d3a66673c0041cb7137b0d0dbd148621d22b54857874cc4da433e90" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="8de9ddcd67edb937369dc54e457c95d3ffeb3f5023d3f87835174ce16e05b836" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="c9bf87931655997d35c1c48a25791c07cf7f37f60a627df6989d904b65d4ea0e" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="5b258519a70453ed5985a4dadc808209e4abe7000fdc62942409e83e65540739" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="31d9efb0cff407c85eb8e3cf67b93e2524d754f891e647a40b6c50764de58072" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="13cd8521eaf92b083a5c27ff86d6e273a00979560dda4b51fe00f0ddf7714d55" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="89f75bacf3e7a31593f4fef4096db7ea26f28183c746fa333cb92da1cb299275" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="b59a65a45c7f35e535a455d8b4ca983fd4c82545267635625805c9b63efa4336" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="e09ca534e34ec9f637896bfe900560feb7a09f241e1aeeb1d220de6baf7e07a3" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="4bf9c85f4108e652c1ca2dc63261952ee5430c5423afa62d8d83c06de3f87c6b" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="7e908d590274e400dee6ab49f47aeca0181b462da5dddaf0036e90d78b41552c" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="145942912c27be0494d063ebb50daece67d2bff2994297d78eefd86b8bc364ad" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="d888dbd37464bb6371ab9987009aaf7c8c930b6bf24c041ba8904d6d850d7c7f" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="d3196433bc53ebb0d47721a00b41573fbab6825e98ef0e15293f1306835a3b78" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="f7f795b2a0b912d1baf0bf54e9b1d9101ab9dc558ea8e0a81b8f55797a2a134c" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="5868da25423b86d6c1e05c4575c86552c80ed907beb868a2ae2aa733cab95018" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="31a11fa39d9711faa49df9b07e407b549c00bff7fb8fef9d12f858487b8a5162" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="6614643bff55e66d9526b9cfa556ea563fa669230fd673d68a33d58158b33cff" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="f884b60e7ac57813ce4408b61c1f0669e292a958c4d745559fb8337a906ad247" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="87cc36d941673c013ebdcb5cd592074a43b85db4d0795180f15cc4f7986304bc" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="1126c5104e10ed96753dc1b36ddffc4f71b6ef0f08ab3ab939c48a32071a2443" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="b5ccc4fe75a2861d8b1af5ba5092c7d3450d5ac989b62aaff4824c2fe048d7dd" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="a864c94cc1659d91e7511c3c8a0b02aca23c7b323c41099776308e05f443ac59" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="f1bb689ab6522f548206f4aa9a7619bf86b663e6b04697431d7103c24ff15e23" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="63afa48c201f557d3eb22e9fe7662d2dc9c73a6f2bedef3895cc53d03e1b50ed" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="93c98d442614107d9d86d432bf726de6c46bb88656d82df7920a78d05014b7f7" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="216924837fff3a1524f358c40b967e83973b5cb36866ee1468bdf47bf6a333c3" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="6c4c5d0bf04430d8bc789fe8e64b8633fb538a1ad489dbd9c68887c91134aaed" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="fd0b6a1eef2462b378a6f349750c212ffdac2b4a49cf81384ea4e6c1239da7b1" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="391d935a814db91effe654ac43a84779329501882630c2e620075e2b79d01348" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="561a1729df578223d61e7e86cfed65c2838dc259d5f4d71f39341aa072a565ae" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="c95a2fe4ef67e0bfce346de751d9e195fbd9ff871bb77ec1fbf7ed8a4d3d6d71" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="608e5a45d33a61b55813de33a125562dfbb1c63100248aa1951953fa285c70a0" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="84d72822e1e05cb0a9656c4d3392427cf6d828ce8a69cc064d0969d7b2faaeb6" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="718d8a663f3a3ea4941e0ad16c4c2c1576f5e211ac30d48fce1eae80062cb7e7" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="72e0f8599c14966a8e3b7101a7766428ad63b1a308cdd2fc95ecad9788a3f050" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="e9a00fa5a1c9485e2ab8c51a95883002eb2d8b4b20ef749db34cd8aaba8c5b0b" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="0e70c5633edae5a8b7a155a1ddad18b3687ebf71cbe79bc6482f3256e30e9e7c" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="759b6217914aeedcc7947361fc84cfe5e9340557b6da9533f06f8b7d6565d031" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="5b688ca8784547bef04efe3558843b8604f7dba55baf3a09f0328e2b5b5f2607" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="d529a2b1597d28a71d41d3d4f138d4c74b5352faca093112b40b88590c0b21e5" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="26788767ef7cea0a1081a4576d4d450ddef1f6280146ffdb991b43c0435ec320" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="4ca124df356919177022e7e278abb2e2848033dc8d5be34964066c27a9631b17" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="44ccd6e80869eae25ccdf4690a394a8fc27618cde7dad061295067373feec3ad" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="effe311cc5cd32746ccf50b0e4921de17498cb6ef7e6c6a5fc75f10903178325" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="c072da1e2f6592bdfd7565e872cf48b42886617e139af9d012a72cf2ba6d320a" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="ee0e4099f6b4287de74328fd0ab90c6ee08ce13eb43988edde7b58cbb6551053" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="53a00bbd71fb1f51d5dad29d89b4325462fa8de34b9e8d7906ba989e725aa20b" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="a3975575dad373fef5fc3634b75ba0cc6c7c75a4e4c15326fe05e85c3777a4a1" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="4da9ed4080f0843e3cd40c039fd9ab6263231c7e2535c650150da6b88dd324e4" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="3974bb1fde5aaab17e1a8cd8be63d4411663dcac7828ab3537dec4884ac34aa6" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="ce09b5b2ac821d2357bc706739e07feb9318a94c610a7fc2e92ed2499086b1f5" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="4c4cad0b9359628f9824afa7608b943c756708a295a58332d689b95cbc828ec3" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="4424f63b04823398f68cdde58d53e4f56a3267f89243409e7a6812615cdf21cf" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="b34d6287c2bf2edf31b0ff49cbcb27865619138d5e49664ceaf1a647baf20d19" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="cded1cb03a162c2b83d0285f8675dc66e7e3bc3931f523c9f9542e9e670e98e3" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="4356e288c2a705104c140a1152ec79eb950080480ae0d1108ff7291973d4083d" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="719f3160f144e24f6766bd0c307195387d5b2a2ee73e6e9c56b416a565c166b8" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.5"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
</package>
<package pkgid="ab6d4a19429a9b65700da53832e98bc6d1181e5f5a2108024e4ce205d97e183d" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="222ff79c2593a7c7b5afa546428a5b98a70648c7d1c35184cc479141e41d9da9" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="a5bc7ba24e001951454a9edd0c8e3d0e61e6bcfe8e976a62d95ea751fba04192" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="fab908aac93590607a09ec2fddd0775c13e618bff89f0e982a37c75c6f17f46a" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="b78ed44fba6ba4c4b057c8af9c0252076280a3653ec77a5de4c21de9a1588c18" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="5ae8b1e80af9e50fecd620bacadb1d5b4a2e4fc5e517360c8c37595852fcf0d9" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="8aa922f84b899f5a2884de52dd1971669263c50ff0bfa30eca91031d22632439" name="python-syspurpose" arch="i686">
  <version epoch="0" ver="1.24.45" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.36-1" date="1588680000">- 1831104: When in Simple Content Access mode, subscription-manager should not
  complain that subscriptions aren't attached (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.37-1" date="1588939200">- 1830994: Fix warning messages in dnf/yum (jhnidek@redhat.com)
- 1823523: Detect rhsm-icon running without psutil (csnyder@redhat.com)
- 1771921: Package profiles sends too early when registering a client
  (wpoteat@redhat.com)
- 1688702: Generate redhat.repo in off-line mode; ENT-2302 (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.38-1" date="1590580800">- 1837244: Fix wrong version provided by subscription-manager version; ENT-2388
  (jhnidek@redhat.com)
- 1834792: Try to terminate rhsmd after timeout; ENT-2368 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="24f72ea2bd9bd90db8b0577a90a0862d45130da4b5d4b2f516e4b75f58e54158" name="python-syspurpose" arch="x86_64">
  <version epoch="0" ver="1.24.45" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.36-1" date="1588680000">- 1831104: When in Simple Content Access mode, subscription-manager should not
  complain that subscriptions aren't attached (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.37-1" date="1588939200">- 1830994: Fix warning messages in dnf/yum (jhnidek@redhat.com)
- 1823523: Detect rhsm-icon running without psutil (csnyder@redhat.com)
- 1771921: Package profiles sends too early when registering a client
  (wpoteat@redhat.com)
- 1688702: Generate redhat.repo in off-line mode; ENT-2302 (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.38-1" date="1590580800">- 1837244: Fix wrong version provided by subscription-manager version; ENT-2388
  (jhnidek@redhat.com)
- 1834792: Try to terminate rhsmd after timeout; ENT-2368 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="59c764487628465157aaa6e88b1bd008198bab72e84ba2f255ebbc341e99d4f8" name="python-syspurpose" arch="i686">
  <version epoch="0" ver="1.24.48" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
</package>
<package pkgid="44b7d4e97b9641d825640438209b27cd1b6fadbc584017910d7a65b77301f286" name="python-syspurpose" arch="x86_64">
  <version epoch="0" ver="1.24.48" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
</package>
<package pkgid="5a060ffbab9f7dec54fdd62a33dbd328bbe8da2046a895a993b9e5560f935137" name="python-syspurpose" arch="i686">
  <version epoch="0" ver="1.24.50" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="0f112935b12c92c771b26f1bedaded170b2cce26c7faeb83a2967a1b29495f2f" name="python-syspurpose" arch="x86_64">
  <version epoch="0" ver="1.24.50" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="9af6e8a6ae436f7050e243c00340e883355c165390078890a981b6b1a850777b" name="python-syspurpose" arch="i686">
  <version epoch="0" ver="1.24.51" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="1ab0649cd1e7c45caf30da18174fbea1584524e7eb0756808d32171384d1f254" name="python-syspurpose" arch="x86_64">
  <version epoch="0" ver="1.24.51" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="62470844e65105190889f924b927a81b2095f904b04496dcd1b33a615c077cbf" name="python-syspurpose" arch="i686">
  <version epoch="0" ver="1.24.52" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
</package>
<package pkgid="0c8dbece5b9b3aefcc2e3680802c56f4a6aa8d23e3c6fe1078da9d44c6e875ce" name="python-syspurpose" arch="x86_64">
  <version epoch="0" ver="1.24.52" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
</package>
<package pkgid="8e15a3ae16e9bc72db65a1146682ad9001672c8f2adb26fc9853c8ec5e4dd559" name="python-syspurpose" arch="i686">
  <version epoch="0" ver="1.24.52" rel="2.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="d1864e7cb8634f9ee3252f3a3930ab9584bbf6f61fadd2c4b0de16a6185c19d5" name="python-syspurpose" arch="x86_64">
  <version epoch="0" ver="1.24.52" rel="2.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="4613f7802df7fed325ce58e7c9549ba202b9698efd72080c60841d793c9e5f7a" name="python-syspurpose" arch="i686">
  <version epoch="0" ver="1.24.52" rel="2.el7_9"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="f795ebfa5fec27fcdc616efdb790c448aa6bbc1df45ec6d01136214104f97a04" name="python-syspurpose" arch="x86_64">
  <version epoch="0" ver="1.24.52" rel="2.el7_9"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="24c187f7e218b74ac08f54425bb86eac27648c470f24f0514b7e05fd142fb5d2" name="python-syspurpose" arch="i686">
  <version epoch="0" ver="1.24.53" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.53-1" date="1695384000">- 2229752: [1.24] Hotfix of D-Bus policy (jhnidek@redhat.com)
- Collect GCP Project information as cloud facts (chambrid@redhat.com)
- Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
- Stop requiring M2crypto (ptoscano@redhat.com)
- tests: make M2Crypto optional (ptoscano@redhat.com)</changelog>
</package>
<package pkgid="75635ad66cbccac5e53308f045bfbe7f574ddee1e25181d8bae4cf778703f823" name="python-syspurpose" arch="x86_64">
  <version epoch="0" ver="1.24.53" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.53-1" date="1695384000">- 2229752: [1.24] Hotfix of D-Bus policy (jhnidek@redhat.com)
- Collect GCP Project information as cloud facts (chambrid@redhat.com)
- Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
- Stop requiring M2crypto (ptoscano@redhat.com)
- tests: make M2Crypto optional (ptoscano@redhat.com)</changelog>
</package>
<package pkgid="8b7ce0a4695b6de0809d9cff0ba56648516dcf5d648744c43e1ac5be87d3c3f5" name="python-test" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="d4779b96f3502ab8ff77d8ffaec15e1821c421340382cf04847d128f950255fc" name="python-test" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="15d92a52d18ce87890df1eadd9d40252cec86707d5798a5c2c74c8f4b034565a" name="python-test" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="b9b7f41dc0e269a576ab2b566a991e8c22f319ee37b1b6c5cf457701c6d6888b" name="python-test" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="d199e024bb3f06fccf667c3032ca97c3bc400929b84b4db08daffd09613d6e74" name="python-test" arch="i686">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="74b48128c55028bb8b07903661cb57ad6dd6ec7cb246340a485d1d7a0d1c2af3" name="python-test" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="d31aca74efa1d32c2ffcdc8cc8fa1f6d1abe3ab47d89587f196222e13a027ef0" name="python-test" arch="i686">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="08849f564eb84a5c73816ab19bf6c10ca71cbf38571d25978c377a95d711ca3a" name="python-test" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="7f4b07a631404a008edd030ff065e65c637e4b6848373618ab265310c19180b3" name="python-test" arch="i686">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="3cdc3864b9f80861b42320afe0f616585f6639a1d081622b345ce5e5aa46b99d" name="python-test" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="8d46de98d83c75336c12da051453520688cab09e28fa90f124590b280c4b1215" name="python-tools" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="3a417f8a73956b2c281503e62ecd209e22a4cafec2acc45a885bda7fa2b082c3" name="python-tools" arch="i686">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="a463e055fbee3178c482c68815f339faa151ca8167be67eecf2f752f8a66b0d9" name="python-tools" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="9c1769708a0fad3b1908f2e99222ea0bf37f6caba247d6d1a960d1eaae6c0928" name="python-tools" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="e510ca3e6eca6c9c8da59a14994f89d629ab8e353e31d0b29e05ddc11f62be8f" name="python-tools" arch="i686">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="e2e7e18c9901d7b0359ada8d9f3b3b4cfcac44224030394afe558a162f659d27" name="python-tools" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="f189a2cc8edfb8ba006cdfbcc374db8f253dceb2c5166aa7f168b0aedd694e14" name="python-tools" arch="i686">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="5b1fc42ad2e0d93e99d66215616d7bd495658f817a56d35153b3cf7d99317991" name="python-tools" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="bf0a4bca47dc8384edb228418bb45cd164f9e0082928acc46f6051643d7316e4" name="python-tools" arch="i686">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="50cce4ab57b2795b770b0f2db0ef0d64e10d7746694b70b680daf5d28537100d" name="python-tools" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="c8991d23605028f734e19b8182f2d4f3b77fc753b8345b5edbcdcab89adb1856" name="python-twisted-web" arch="i686">
  <version epoch="0" ver="12.1.0" rel="8.el7_9"/>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 11.1.0-2" date="1325937600">- Rebuilt for gcc-4.7</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 12.0.0-1" date="1329048000">- Updated to 12.0.0</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 12.1.0-1" date="1339934400">- Updated to 12.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 12.1.0-2" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 12.1.0-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 12.1.0-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-5" date="1471003200">- Fix HTTPoxy CVE-2016-1000111
Resolves: rhbz#1358792</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-6" date="1564747200">- Fix CVE-2019-12387 (HTTP Header Injection)
Resolves: rhbz#1721518</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 12.1.0-7" date="1586260800">- Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities
Resolves: rhbz#1813439 rhbz#1813447
- Remove useless macros definitions</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-8" date="1652961600">- Security fix for CVE-2022-24801: Possible http request smuggling
Resolves: rhbz#2073114</changelog>
</package>
<package pkgid="a11c3f5877e592b8d30aed3ea2a22a0d1762322370b5b87f8eaf795b72db5585" name="python-twisted-web" arch="src">
  <version epoch="0" ver="12.1.0" rel="8.el7_9"/>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 11.1.0-2" date="1325937600">- Rebuilt for gcc-4.7</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 12.0.0-1" date="1329048000">- Updated to 12.0.0</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 12.1.0-1" date="1339934400">- Updated to 12.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 12.1.0-2" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 12.1.0-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 12.1.0-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-5" date="1471003200">- Fix HTTPoxy CVE-2016-1000111
Resolves: rhbz#1358792</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-6" date="1564747200">- Fix CVE-2019-12387 (HTTP Header Injection)
Resolves: rhbz#1721518</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 12.1.0-7" date="1586260800">- Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities
Resolves: rhbz#1813439 rhbz#1813447
- Remove useless macros definitions</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-8" date="1652961600">- Security fix for CVE-2022-24801: Possible http request smuggling
Resolves: rhbz#2073114</changelog>
</package>
<package pkgid="016c58ebadd7a34bfb339c27c31e3a6258fccd855521610c03618041aa573864" name="python-twisted-web" arch="src">
  <version epoch="0" ver="12.1.0" rel="8.el7_9"/>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 11.1.0-2" date="1325937600">- Rebuilt for gcc-4.7</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 12.0.0-1" date="1329048000">- Updated to 12.0.0</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 12.1.0-1" date="1339934400">- Updated to 12.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 12.1.0-2" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 12.1.0-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 12.1.0-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-5" date="1471003200">- Fix HTTPoxy CVE-2016-1000111
Resolves: rhbz#1358792</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-6" date="1564747200">- Fix CVE-2019-12387 (HTTP Header Injection)
Resolves: rhbz#1721518</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 12.1.0-7" date="1586260800">- Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities
Resolves: rhbz#1813439 rhbz#1813447
- Remove useless macros definitions</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-8" date="1652961600">- Security fix for CVE-2022-24801: Possible http request smuggling
Resolves: rhbz#2073114</changelog>
</package>
<package pkgid="98bd5165aaddc5aaf594f40e4ff661e2c12306c3bc1b5944edada058748e28a5" name="python-twisted-web" arch="x86_64">
  <version epoch="0" ver="12.1.0" rel="8.el7_9"/>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 11.1.0-2" date="1325937600">- Rebuilt for gcc-4.7</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 12.0.0-1" date="1329048000">- Updated to 12.0.0</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 12.1.0-1" date="1339934400">- Updated to 12.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 12.1.0-2" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 12.1.0-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 12.1.0-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-5" date="1471003200">- Fix HTTPoxy CVE-2016-1000111
Resolves: rhbz#1358792</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-6" date="1564747200">- Fix CVE-2019-12387 (HTTP Header Injection)
Resolves: rhbz#1721518</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 12.1.0-7" date="1586260800">- Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities
Resolves: rhbz#1813439 rhbz#1813447
- Remove useless macros definitions</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-8" date="1652961600">- Security fix for CVE-2022-24801: Possible http request smuggling
Resolves: rhbz#2073114</changelog>
</package>
<package pkgid="02f5b625fc757452a6c64ecdc3d1defba8933326affd3e763810a1a1a92e11bc" name="python-virtualenv" arch="noarch">
  <version epoch="0" ver="15.1.0" rel="5.el7_9"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.9.1-2" date="1374062400">- Delete bundled libraries of pip and setuptools</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.10.1-1" date="1377000000">- Update to v1.10.1 to deal with different securiy issue
Resolves: CVE-2013-1633</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
</package>
<package pkgid="f8261abd9f66eb02f7135badf31eeb11799d67fa2b1acee3837928aba390e98f" name="python-virtualenv" arch="noarch">
  <version epoch="0" ver="15.1.0" rel="5.el7_9"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.9.1-2" date="1374062400">- Delete bundled libraries of pip and setuptools</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.10.1-1" date="1377000000">- Update to v1.10.1 to deal with different securiy issue
Resolves: CVE-2013-1633</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
</package>
<package pkgid="6a52678e57b76dd87ed262347fbf85b9173ca5f1428701ca896a99498357f6ce" name="python-virtualenv" arch="src">
  <version epoch="0" ver="15.1.0" rel="5.el7_9"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.9.1-2" date="1374062400">- Delete bundled libraries of pip and setuptools</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.10.1-1" date="1377000000">- Update to v1.10.1 to deal with different securiy issue
Resolves: CVE-2013-1633</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
</package>
<package pkgid="ab03f284a9e950193413c896d4480ec44760c5999c352014682945a71d86075c" name="python-virtualenv" arch="src">
  <version epoch="0" ver="15.1.0" rel="5.el7_9"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.9.1-2" date="1374062400">- Delete bundled libraries of pip and setuptools</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.10.1-1" date="1377000000">- Update to v1.10.1 to deal with different securiy issue
Resolves: CVE-2013-1633</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
</package>
<package pkgid="fea528294ea328e5a741d20809d6be1da7dd89178a14497014de6b996242a275" name="python-virtualenv" arch="noarch">
  <version epoch="0" ver="15.1.0" rel="6.el7_9"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.10.1-1" date="1377000000">- Update to v1.10.1 to deal with different securiy issue
Resolves: CVE-2013-1633</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-6" date="1645617600">- Require again python-setuptools instead of python2-setuptools
Resolves: rhbz#2054827</changelog>
</package>
<package pkgid="36d1911019c0183e9e5e4fededc507ac9867c34f1e1dc7f1e536fb4cdd5e11ac" name="python-virtualenv" arch="noarch">
  <version epoch="0" ver="15.1.0" rel="6.el7_9"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.10.1-1" date="1377000000">- Update to v1.10.1 to deal with different securiy issue
Resolves: CVE-2013-1633</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-6" date="1645617600">- Require again python-setuptools instead of python2-setuptools
Resolves: rhbz#2054827</changelog>
</package>
<package pkgid="058ffe3fe4d6bde00941d05c44455a0c50672230e4f709bcefe3958e5697e9e0" name="python-virtualenv" arch="src">
  <version epoch="0" ver="15.1.0" rel="6.el7_9"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.10.1-1" date="1377000000">- Update to v1.10.1 to deal with different securiy issue
Resolves: CVE-2013-1633</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-6" date="1645617600">- Require again python-setuptools instead of python2-setuptools
Resolves: rhbz#2054827</changelog>
</package>
<package pkgid="58ad8f6a9703223d60824025c0abfe307d6e78ede2f8d72d6e85548e40d06fa3" name="python-virtualenv" arch="src">
  <version epoch="0" ver="15.1.0" rel="6.el7_9"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.10.1-1" date="1377000000">- Update to v1.10.1 to deal with different securiy issue
Resolves: CVE-2013-1633</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-6" date="1645617600">- Require again python-setuptools instead of python2-setuptools
Resolves: rhbz#2054827</changelog>
</package>
<package pkgid="4a46a2210222b7e1e83775fd156958f59eeb19186169051e5937347b6f4a3ff2" name="python-virtualenv" arch="noarch">
  <version epoch="0" ver="15.1.0" rel="7.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-6" date="1645617600">- Require again python-setuptools instead of python2-setuptools
Resolves: rhbz#2054827</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-7" date="1652788800">- Security fix for CVE-2019-20916 for the bundled pip wheel
Resolves: rhbz#1868135</changelog>
</package>
<package pkgid="15def4fa87dcf129f7e622428830acf6f1652c1901250add7adfa0d9bf1741e9" name="python-virtualenv" arch="noarch">
  <version epoch="0" ver="15.1.0" rel="7.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-6" date="1645617600">- Require again python-setuptools instead of python2-setuptools
Resolves: rhbz#2054827</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-7" date="1652788800">- Security fix for CVE-2019-20916 for the bundled pip wheel
Resolves: rhbz#1868135</changelog>
</package>
<package pkgid="791158ff5c3145c458aeb6e7a7fece091d1d69ac70a95afb22c2067b5e6c2477" name="python-virtualenv" arch="src">
  <version epoch="0" ver="15.1.0" rel="7.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-6" date="1645617600">- Require again python-setuptools instead of python2-setuptools
Resolves: rhbz#2054827</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-7" date="1652788800">- Security fix for CVE-2019-20916 for the bundled pip wheel
Resolves: rhbz#1868135</changelog>
</package>
<package pkgid="1dedd815442ffae32f0677da403514081ce1ac15abc933bc29b8dfb5e01d3e55" name="python-virtualenv" arch="src">
  <version epoch="0" ver="15.1.0" rel="7.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-6" date="1645617600">- Require again python-setuptools instead of python2-setuptools
Resolves: rhbz#2054827</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-7" date="1652788800">- Security fix for CVE-2019-20916 for the bundled pip wheel
Resolves: rhbz#1868135</changelog>
</package>
<package pkgid="4c344845a00a569b4323b8e75472911b102400fb37d966e70091a2b8ee72debc" name="python2-gluster" arch="x86_64">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-49.1.el7.centos" date="1615896000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="aaf01d7c71eaae37bce31bee7fcd5d8c523401c8e76bf401f7648c28c70b5b41" name="python2-gluster" arch="x86_64">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 6.0-61.el7.centos" date="1649160000">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="b0fabceabebfeddf1dd3ed9a191ccd030a665e49630ad09e3aa1f64f7886b9aa" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3012d278f7280c9a44687818b43ef85317878c013080cc8a10a7bcaf5bf2bf28" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="623bd132ef9f079f9106beb447f331328c53aaa02addb869f1cd60195d1e7bd3" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="437cfd7a518fa85e36081d9c0f2f76f6c60616248ac6833b58a76266cdf04c94" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="cfbefa4ad19538fec0eab2474dc4c71acb08a8b496d3581357b87bc79d83afca" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d0496e7cef58a4b045dfa808ac118d099d39c50381b3e700db47672222c8c0bc" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5e27d7f1f9f49fa7e9685b9d22cac14f4a40955d51f1276c876d5e2601fad3a1" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="ad6427538df2d83c8251a291a035caeb1bce3cf066c9f293454b27062fd99292" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="1fcb9c1618f904ccc1dd0b5cb59dba329d16678413b7d5bd77413e6d1173c044" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="7647121d1bc9babf04a3a3e33220a29e29775244e0b8a1eb1efd714c311186ac" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="6f7269c1b6e8197881e9bf15731f4fcc6802e90803184aed2e57a437b89f2b48" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e175b3c45f5d4b12d8823e053de4f96294f418f739b2011c1abf9795b8226b00" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e56a2e30d5a5da8c54ddadb44dc6b2c5418624b8a602216dc79ed2957591766e" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d4b670c4bcbd9db57f61ca5655ce65b4b79b25abbe3ddf2e5b854c9cd5aa8fac" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="648f32aec3d82f7dd9864245033723ae54eec32db95c2a52158edd3977d749ec" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="18f75e554b8eb8efe87eebd086a5d20f058b31f3ce2492cd99a5cd58d4e8388e" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="64b1787f72f27ee0bda430b4cb622620e01ca51ab1fc2d226e81e3379e6be827" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="06fe53f7f956da7b0efb22d72661a5ebfe40bba26e80099f7e6b75d49ea2aea0" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f491dcf1590d28c34fce4ab565929e4601eb0eea57fa223a0a5bd417283d6f65" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4a89cce46d42e0340507906bf522ec0c866e755d8443f8b2cc9f79920bd9d87a" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4792c0a95aff9e3412f9eeac1cf27cb1e389a3b7ff181d7801ec6ba63b639f50" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5d993377c4b7b5cb2edf0aeb7531a00c6a302ebaf980aea5c92e59a5a23faf4c" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f9803b4b21fe4a3d7ea7fd83abed5dab499c0e8858cce0be4e4dbbc38745db1e" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7028a884e9b602be0c25684563026ab3467e368532eb2c84a32162330a8328be" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e9e67d1e271ee4984b0571b7b677bdaae37a705199a273b9c87f5cf39e270bc8" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2c2f2fcdde5219004e1d3a8e203f0ec07580f79714e73ca448ab465694de227b" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7efa99fb154411b7bd12b992d4ab2e37b91b68f261e87dc4c87b02816ff29d52" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="08d43e16eba0ac4a01001af7898df2e2d5f49823a683c78797a35a6baff1a63f" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6a3f02439b6eccb5913838b65adf05426f2034f84de9bd5fec681ca94008bc0d" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="7dd990c9e33223027999be8b26223939f53c290496a0bb81b75bd09ab7a5b98b" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="70da3d4e6988f93f355b9cf03e747abfa0b09048da30c2062717e4376c137eff" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="1c0a07ce26868b099702674eed285eb21f57a48e6192df64b972cd83f72a5c21" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="485f30a1e7bef16d6b46dee38c02ec00b7307283b2f55569a352eeb609764040" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2f5d10fa0358be9a8347069da23ba2303406cd1741d189c90757bf2272701608" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e7f339526260b8851368e44c98842333a6a8ba9b26e4a7b692124c5fc0a2a684" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6cf560f89fa0e58dc62eb42fba6e31db7a5bf185dd2db264f16c62d01410b4a2" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f9cab2954ee00e617f324bb2a904b59cc88b8045ac898147e504740075c3f5e4" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="387b7525d4b6bec9eb93af2086491ea4cdaf91387518d23bd34dd4cb9fe7ce24" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ceaadcac245910298b92c246b96768f61c824e1f88711519bff8dd8a599bc0e0" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="29504aea9f592947c0817dba3c7b5997d8d8c4f63f7b509c3791365d7f47f154" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e0981142a28cc1af31317abf537b06595cd495ef9e109fd75d9e49cada82a805" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0e41b970afcd7eb10d687f2cd4eb88a45294fda4cd829f51e26ba863f0f5ff5e" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="613e3726cb9e039cf7e444a68a5905ed3a3f7cbd49c3cd977f61c3d2b54320f5" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="264874ac26a11fbe71c499f11e682daa7ede0adb3145117cbd56d28f47c3f47e" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9cb01bf362df994b964ac000802ec3246d5adc18739d9c25c263dddf0117b883" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1b49ea0f359a91689f2fc3da5678bb065fcbd6f4806be33c03f0beaf5b582d04" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.10" date="1639656000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="44d96247dbcc4ad29663350d45a6e69fa4848af26c9ed0cb6895d94a2a38070f" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6d06aed666a6d25a5e472a4532e465ccf5f2b58ab1ce02ec01188e042054252c" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.11" date="1656417600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6c107bb5216e9923c6ebf59cbdd58f44e5e047c0f4c3efb0d881b1640323ac6d" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="472210c38d763eebda0b2b8b8b4b9c1d5ee606bc5b8b84541b2f9d8a909cbe03" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.12" date="1667390400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="fe039da0e0d86ef7d86f16e4fac39f70eacb4f82878155565d802479fef392a5" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="87a8a96d001a3841df5351bd5e2403d02530ecd55bf42a0a95e12b60bf7dad54" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="8329809ea04ade366b9df8c3dd951267a48be13fad12960c5a2ce06dc5ee8c5d" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="52e9852351ff02c0770b1f70f461347b82264868bbac2d528cc79a920c3b01a6" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="e52313c18dd9b64a495cca9faeafaa7e2d7e0cea96b98ccf5483c26740f095b2" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="985175ecfa35f67fd85e999aef86c0fe491befc43fc8e6ec6bd3056c4f580a5d" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.16" date="1704888000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d277d66f22d4d445fd001b053803d59b4ec4a3e0748f4187261ea4efa6ae4ccd" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="170d49fee8a0c3c424dfa3041e07aa8b133a8d9be67b11c3ec006b323991681d" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.4" date="1615896000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="bfa34aad01dc0f16d61e944bced19bcd3f03d141576e3b9827a8c10a0a926c38" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1c0577217e02bbda652d6ac95c47279bbf32ca4137a418806f81f25e93cf0cd7" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.5" date="1619524800">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c160fa0804a019416a058b8336eeec187595277383286fae846d75bf44181ba3" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7845f512685f139bc59d00826e1cb688264f674443630501298e2c3db0a7a47c" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.6" date="1623153600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1b4b904857bc76cc45be3bbb10a7de52d4336329e093e937e4022d7bbf1aa297" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a3bf63399b23814fc957a82ac7065f6d279695d4852c9161e523aa0dedd25a35" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.7" date="1626782400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="423074cf5669fb9e9edabeae4e1c6f4858014805435386cef85ff35b034c5174" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c5bd46ae84862d6a29ccbccfce1efa154314ac920bb25ec47b89a5cb8b788af7" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.6.8" rel="5.el7.centos.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.6.8-5.el7.centos.9" date="1634040000">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f630b10959a465a4fd9e05d370418bab6dbbc716a664689d65d3830eca43513b" name="python3" arch="i686">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="b2e11b7da657a6530dd58c2642757f8f031cda50ed4899ff0fb0f34eef82f518" name="python3" arch="src">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="0b8d0a1618a2d885e14cd003bc4b58db96a62dcce7dcc91808c62596d8ef5c99" name="python3" arch="src">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="0a9dfeda1fcad21c4630286bada286bcaa9e6e6fd6e1a4c7161deba5a5681e21" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="b50349a286db99122cbea74a43c58b75959eeffc3ec309c975aa7606d2b7f9dc" name="python3" arch="i686">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="dcb3fe95a245e5f7e34bbdbbea7f20a406c3e535d534421bd5a8a560a2ccfff0" name="python3" arch="src">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="c7ff0489a19f360166c8a80ceb58568fe61fdaf35499d46e5a2f18cab1464264" name="python3" arch="src">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="05765baa312625628aa3b308e64b674fd6c7ce3bb653dc3bd8aef78a6fbea881" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="a59c076e68d47916ec16e2d9b5465bac496e5db8d15a23f14291562574aba11c" name="python3" arch="i686">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="fa4321751115cf890e06445fc19d97b452385ee1b64134f57e795689f7898d98" name="python3" arch="src">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="3d3d5674d8e8be71c812c6b0651809a6befe64c914888aed56187dd98a6acde1" name="python3" arch="src">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="c482bf4d4e610c74cd706a7db9a8790757dc5489f3928e3c6db9797fdec680a4" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="ae9baeebcae11e5544bcdbc90bdfa6ffe97d0f97f10661ff4aaf6959e1d1bc09" name="python3-debug" arch="i686">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="3601dad85cebce4c866530ef6dd7682267fc0a23ac28d2c4d444cf04552e888e" name="python3-debug" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="5f57614723bffe6a7691d9edff740d73aee6aa574ee8dbe5481acc1bfb2c46c3" name="python3-debug" arch="i686">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="d792ed4f93a43b81a28e2f8f1af1ca16e1a6b2414992c1920460917f004dc3a1" name="python3-debug" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="a3d6ca76aeb0b3ffb37bb94475fa1f9df70a78478fc28dd7dc18f4e19a506d0d" name="python3-debug" arch="i686">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="a07d80f7c120a9da23b7c76a91761176d8c81b563e9cc973d57cd75974ddf86a" name="python3-debug" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="61a64bfca79ea98c38197ed0357e422bb2c1014439f25decaf41048f7bba648a" name="python3-debuginfo" arch="i686">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="6ecd6aec9bdbb961aa897c1481b1e081dcaa145264228783e2cbe824b4dd7824" name="python3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="97fe3713d7fcd051025b0bdd36f2785fb7d32922282373e66f92fa0612a9f4e5" name="python3-debuginfo" arch="i686">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="0cf49b9d419472d9f7bc891030c9e97fbf6bbe7c2abac266919d2ab38971d633" name="python3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="4d0d11ff01454ef41406123b6f419a2ed49b1cb1c97b53af27ffc47c85d81ad9" name="python3-debuginfo" arch="i686">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="4da7c9de34b5c87671570e5a27ffafc61e782852e49385dffd71a400120e92eb" name="python3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="897b06cde5b6825bc7ff9065d16caee0ab9642bdd08fc9f20f31ecb8f7ea23f1" name="python3-devel" arch="i686">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="7abeedb8090fffb7c876557aecc53aaf204a26447909671790d86f50e5fc3459" name="python3-devel" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="d22030de82605a731968eb69d393ba2171c2417dcd44d03fe9f9d29b16daec80" name="python3-devel" arch="i686">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="7a07463a1ebcebf3ce2bf1ed08df6c28ea23e52ce42dbbb6a24c6444bac4d362" name="python3-devel" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="d43beebf3ed73de570c22dbae351fda7d944c8f5e6c33deccc2a83e874592796" name="python3-devel" arch="i686">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="a4298484917b7440452b687afc1f39a298bccf4a9f09694988cf7e33ae016790" name="python3-devel" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="ef3e6446730ded57d184be5beca9bb3b8d5c26516c3223c3f34a13eb716bb359" name="python3-idle" arch="i686">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="cb06a64b73e77d9bf3e9772f311b3c6c897b89e9d151d6c80164aad17344aef6" name="python3-idle" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="048896ca0a40804a0116640dd41e75adbe13caf99e12bcb0fbc1b37913546dbd" name="python3-idle" arch="i686">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="88265da9691014284b3dc6c87cb1b354d6076d0e1770128dc001c037438bc80c" name="python3-idle" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="0c2b80a6bfa91cf7b560e3c2cd9f40cf43a77711f79619f241cecb8780cea850" name="python3-idle" arch="i686">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="c61e8f7fbe535c76cfac9cda8ecd49c9949d907920f97e6973f0fb1afde2cd00" name="python3-idle" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="0273e2a4addcc141124b7eaf615239e92920a567daa90d1e33d83a071991c296" name="python3-libs" arch="i686">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="bbb54def2390b9a67f75f11d11c697382f524732e83f75a1d659a6535370361c" name="python3-libs" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="b9c50c9766cd9c0facc6d051575bddbcdbb8a74db7427ce92aa9f0805a53fd43" name="python3-libs" arch="i686">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="60c1c572725cd05683645883b93d8efafe103ce8b1ebf010874915ce194e43d2" name="python3-libs" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="161ae0e1992b3378d83a551d4bc2d4ea109b1fdcbf8b805471590f8854e68ca3" name="python3-libs" arch="i686">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="de740253ccc39ef0687109d7edd9125000b01bfe1b68dab3fe8262778ab3bdfe" name="python3-libs" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="95e41d0b64d1d015815ec61f7a53d404f0e85a0f7d50077545c7ef0de9c4c839" name="python3-test" arch="i686">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="2186c588827eba25fff5468107a6b0b193a7fbe87db1c80e364f307887f0c8f8" name="python3-test" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="eeb2023d61be1602af4e436e385f661fca9534f5ab44e2dcc4c513f434e942c6" name="python3-test" arch="i686">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="a60b5af71181e7f1658fda001d31d76a914dd17a0ac9b004fd367466e3974396" name="python3-test" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="2d2b7e4769a17e242169cff964a0874c226be6e607af8e54c1b142e411e3b1b1" name="python3-test" arch="i686">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="91b8f77a7143a0a3a796a6380e09ff576eb5b5f64e08eed992641c2fc9942c93" name="python3-test" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="2590c69259a4b7584be382631950f185f5f3623b72e60fc1569ba1cb989b7b4c" name="python3-tkinter" arch="i686">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="d2fd86a4ae723909245d2e83bb5368caaec4ff14ea6682ed12589a7e89efe4d1" name="python3-tkinter" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="94af65f60cbeaaefa762f2a8bc162942a48e3cf08ba0beba4001d08339cbf559" name="python3-tkinter" arch="i686">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="82b8356799a5ceed9058b3db0c36b0b7a5879f6024823d8bd8710e8f1e068458" name="python3-tkinter" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="f4de298855ef71916d61e682ed2d66199e05cebf208c3cf941b6a63856e5fe11" name="python3-tkinter" arch="i686">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="978cd46ac3b9edc5305f23b02963865986bb3055fdcdfd8f56c76818e8c2a680" name="python3-tkinter" arch="x86_64">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="5235d24a47a8f9747dae06b4fca7088fd95762ad9c5a4100d82aa9033544c3b4" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-168.el7" date="1566302400">- kvm-qxl-check-release-info-object.patch [bz#1712703]
- kvm-bswap.h-Remove-cpu_to_be16wu.patch [bz#1270166]
- kvm-net-Transmit-zero-UDP-checksum-as-0xFFFF.patch [bz#1270166]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734749]
- Resolves: bz#1270166
  (UDP packet checksum is not converted from 0x0000 to 0xffff with Qemu e1000 emulation.)
- Resolves: bz#1712703
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7])
- Resolves: bz#1734749
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-169.el7" date="1567598400">- kvm-target-i386-Support-invariant-tsc-flag.patch [bz#1626871]
- kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#1626871]
- kvm-i386-Don-t-copy-host-virtual-address-limit.patch [bz#1706658]
- Resolves: bz#1626871
  ([RFE] request for using TscInvariant feature with qemu-kvm.)
- Resolves: bz#1706658
  ([Intel 7.8 Bug] qemu-kvm fail with "err:kvm_init_vcpu() invalidate argumant" on ICX platform)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
</package>
<package pkgid="b93bc9db4e87e8f87e8738cf02d37be097ae0d780921f64945a176f89fcd6ffb" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
</package>
<package pkgid="56f87b8b0ebaf0a8193ef4f7b7a9a8617a9d9b3918e3769db31f582dc5a0bf2b" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
</package>
<package pkgid="43f60c9b336068d1877f7aa994bb739bbc46d229d49522d6dbfc1935e82bf312" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
</package>
<package pkgid="7c9320b69d7677783085aa0f4aa88704edfe9e8c64536b2a82bea0f2d121a9a8" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.6" date="1645790400">- kvm-rbd-avoid-qemu_rbd_snap_list-memory-leaks.patch [bz#2056725]
- Resolves: bz#2056725
  (qemu-kvm leaks on qemu_rbd_snap_list)</changelog>
</package>
<package pkgid="840f40665654ddb88b6a9f8f425dad990d55f5b94270c737cd60b87a3c559370" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-168.el7" date="1566302400">- kvm-qxl-check-release-info-object.patch [bz#1712703]
- kvm-bswap.h-Remove-cpu_to_be16wu.patch [bz#1270166]
- kvm-net-Transmit-zero-UDP-checksum-as-0xFFFF.patch [bz#1270166]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734749]
- Resolves: bz#1270166
  (UDP packet checksum is not converted from 0x0000 to 0xffff with Qemu e1000 emulation.)
- Resolves: bz#1712703
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7])
- Resolves: bz#1734749
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-169.el7" date="1567598400">- kvm-target-i386-Support-invariant-tsc-flag.patch [bz#1626871]
- kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#1626871]
- kvm-i386-Don-t-copy-host-virtual-address-limit.patch [bz#1706658]
- Resolves: bz#1626871
  ([RFE] request for using TscInvariant feature with qemu-kvm.)
- Resolves: bz#1706658
  ([Intel 7.8 Bug] qemu-kvm fail with "err:kvm_init_vcpu() invalidate argumant" on ICX platform)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
</package>
<package pkgid="c38f3bbf6a376f0a64e56d2ad02a45c829a6d2e117e43b5390137856e6638213" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-168.el7" date="1566302400">- kvm-qxl-check-release-info-object.patch [bz#1712703]
- kvm-bswap.h-Remove-cpu_to_be16wu.patch [bz#1270166]
- kvm-net-Transmit-zero-UDP-checksum-as-0xFFFF.patch [bz#1270166]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734749]
- Resolves: bz#1270166
  (UDP packet checksum is not converted from 0x0000 to 0xffff with Qemu e1000 emulation.)
- Resolves: bz#1712703
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7])
- Resolves: bz#1734749
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-169.el7" date="1567598400">- kvm-target-i386-Support-invariant-tsc-flag.patch [bz#1626871]
- kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#1626871]
- kvm-i386-Don-t-copy-host-virtual-address-limit.patch [bz#1706658]
- Resolves: bz#1626871
  ([RFE] request for using TscInvariant feature with qemu-kvm.)
- Resolves: bz#1706658
  ([Intel 7.8 Bug] qemu-kvm fail with "err:kvm_init_vcpu() invalidate argumant" on ICX platform)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
</package>
<package pkgid="347ebee3efefd8bc3b10d406e77254e00a37191566967ba5f0647496c24cc863" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
</package>
<package pkgid="3a6847520b066ef8018bf554d6817e43b07456e5f958b05a81c7057180c39921" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
</package>
<package pkgid="f8713333c9f86d66980a38656db687f23fee0e1489c964152d9127da59abea72" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
</package>
<package pkgid="f5ecc08a39f0a80ce4cf6d4e71e8cb2c182ccdb0bf361548299c3680637bb371" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
</package>
<package pkgid="0d56d9c9a18cedac1e25d71cb61c1106b0442b132a3fd23f8b9e8c3817939090" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
</package>
<package pkgid="3073bc614e20ec7b45f8606433810802b2b30d7099218ec19a5a52ccef10ea27" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
</package>
<package pkgid="29ac1fd78c567da1dfbb594197fad01d506db82843523ad874b279f0312d4f94" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.6" date="1645790400">- kvm-rbd-avoid-qemu_rbd_snap_list-memory-leaks.patch [bz#2056725]
- Resolves: bz#2056725
  (qemu-kvm leaks on qemu_rbd_snap_list)</changelog>
</package>
<package pkgid="795e8b2cbf2713d6f146648bdaa14a79042f723e6befebc8d98c49f049cc2fc4" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.6" date="1645790400">- kvm-rbd-avoid-qemu_rbd_snap_list-memory-leaks.patch [bz#2056725]
- Resolves: bz#2056725
  (qemu-kvm leaks on qemu_rbd_snap_list)</changelog>
</package>
<package pkgid="31dba66a88c8d2169e93064cef3ada18b48f88c4b094ef69f59530dfd5b24601" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-168.el7" date="1566302400">- kvm-qxl-check-release-info-object.patch [bz#1712703]
- kvm-bswap.h-Remove-cpu_to_be16wu.patch [bz#1270166]
- kvm-net-Transmit-zero-UDP-checksum-as-0xFFFF.patch [bz#1270166]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734749]
- Resolves: bz#1270166
  (UDP packet checksum is not converted from 0x0000 to 0xffff with Qemu e1000 emulation.)
- Resolves: bz#1712703
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7])
- Resolves: bz#1734749
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-169.el7" date="1567598400">- kvm-target-i386-Support-invariant-tsc-flag.patch [bz#1626871]
- kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#1626871]
- kvm-i386-Don-t-copy-host-virtual-address-limit.patch [bz#1706658]
- Resolves: bz#1626871
  ([RFE] request for using TscInvariant feature with qemu-kvm.)
- Resolves: bz#1706658
  ([Intel 7.8 Bug] qemu-kvm fail with "err:kvm_init_vcpu() invalidate argumant" on ICX platform)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
</package>
<package pkgid="f37ff1901fea8753086bb3576acb3be847099a3e1c96c39549a279c51b8f5cfe" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
</package>
<package pkgid="a272bcbfb6626db84701b44191e6f74ecf69d3da279bb81a6daaadfe8f4431c6" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
</package>
<package pkgid="146573de34c3d06c9f09c1827308e7edf742c361ec49ff8148324c8c5cea0cf5" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
</package>
<package pkgid="1148b8ecaf14da118828435b534ffc50bd0e79cb1bb5f412a2ca1a8e9b775bea" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.6" date="1645790400">- kvm-rbd-avoid-qemu_rbd_snap_list-memory-leaks.patch [bz#2056725]
- Resolves: bz#2056725
  (qemu-kvm leaks on qemu_rbd_snap_list)</changelog>
</package>
<package pkgid="2b0c694c26395be3a55daae713efdf1804b8461fbac16837cf92ea7add4b15f6" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-168.el7" date="1566302400">- kvm-qxl-check-release-info-object.patch [bz#1712703]
- kvm-bswap.h-Remove-cpu_to_be16wu.patch [bz#1270166]
- kvm-net-Transmit-zero-UDP-checksum-as-0xFFFF.patch [bz#1270166]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734749]
- Resolves: bz#1270166
  (UDP packet checksum is not converted from 0x0000 to 0xffff with Qemu e1000 emulation.)
- Resolves: bz#1712703
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7])
- Resolves: bz#1734749
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-169.el7" date="1567598400">- kvm-target-i386-Support-invariant-tsc-flag.patch [bz#1626871]
- kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#1626871]
- kvm-i386-Don-t-copy-host-virtual-address-limit.patch [bz#1706658]
- Resolves: bz#1626871
  ([RFE] request for using TscInvariant feature with qemu-kvm.)
- Resolves: bz#1706658
  ([Intel 7.8 Bug] qemu-kvm fail with "err:kvm_init_vcpu() invalidate argumant" on ICX platform)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
</package>
<package pkgid="2c3e0cde76a46ab28274f5ef39c7767bffc23b85a372d0615b60c896280dc44c" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
</package>
<package pkgid="509a19394f72d7fef5bc25d948f73427daf7360c0cfbae91fbea788b7a84111c" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
</package>
<package pkgid="f5bad4576ecebaccfbc9b6eb2e6c389f6d9d5054050d141fe48ff9dc64dfc38a" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
</package>
<package pkgid="608ffbbc5537d198fc2b1340bbe05239ea148acbb1a190b61bfcb13f0d4298d0" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.6" date="1645790400">- kvm-rbd-avoid-qemu_rbd_snap_list-memory-leaks.patch [bz#2056725]
- Resolves: bz#2056725
  (qemu-kvm leaks on qemu_rbd_snap_list)</changelog>
</package>
<package pkgid="92f3d93e2f8032958c4a15a05fc7212054379b2eb0c2023bdb8335eb54eda53c" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-168.el7" date="1566302400">- kvm-qxl-check-release-info-object.patch [bz#1712703]
- kvm-bswap.h-Remove-cpu_to_be16wu.patch [bz#1270166]
- kvm-net-Transmit-zero-UDP-checksum-as-0xFFFF.patch [bz#1270166]
- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734749]
- Resolves: bz#1270166
  (UDP packet checksum is not converted from 0x0000 to 0xffff with Qemu e1000 emulation.)
- Resolves: bz#1712703
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7])
- Resolves: bz#1734749
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-169.el7" date="1567598400">- kvm-target-i386-Support-invariant-tsc-flag.patch [bz#1626871]
- kvm-target-i386-block-migration-and-savevm-if-invariant-.patch [bz#1626871]
- kvm-i386-Don-t-copy-host-virtual-address-limit.patch [bz#1706658]
- Resolves: bz#1626871
  ([RFE] request for using TscInvariant feature with qemu-kvm.)
- Resolves: bz#1706658
  ([Intel 7.8 Bug] qemu-kvm fail with "err:kvm_init_vcpu() invalidate argumant" on ICX platform)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
</package>
<package pkgid="297de907ab9d611ec49456ae7797b630ce3dd0b8e87904d7320cf7acd43e91e1" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
</package>
<package pkgid="96ae55884f8c882b40c98e3a29b58f6b8032e0a8cb94588abde27717ab8cea95" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
</package>
<package pkgid="368c8fa2c8cd43af6f35735141fa1007dcbca96541a59a4f0a3dcf31897c7460" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
</package>
<package pkgid="ea3502caa1daa3c2ade6f583090dee9404687f187948c9d993aedd95097b4905" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.6" date="1645790400">- kvm-rbd-avoid-qemu_rbd_snap_list-memory-leaks.patch [bz#2056725]
- Resolves: bz#2056725
  (qemu-kvm leaks on qemu_rbd_snap_list)</changelog>
</package>
<package pkgid="375d59248c6100218901abd9ebf5975299a6819911fb4854c60196b8ad2a6432" name="qt" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="d47bb82c2c02e599503a9ca0d76699174781e6a933096cce750b030e0bd71267" name="qt" arch="src">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="f0f720acde2211fed0b4af7797d5f509976b3e2a82de2f135a0745954e9f7472" name="qt" arch="src">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="03e868cb7fe2e945a03a20f05b94d4c0be492e1f1fc73ddfb60f08e4b80b1372" name="qt" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="e029a5b65e4aa19c283e5c37f52afa87fda4377b8101e14aa9274d9ada78c7dc" name="qt-assistant" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="b42495e81bfddd1baa270040d5189bcdbcfd25588987c1b3d8942327a6c3366a" name="qt-assistant" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="7ee76d4a9dffaff8ec8d36f86cb23da96530118fd5d916b1db82888d59943c65" name="qt-config" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="0ee6d04af5193b59b83ace537dda87a2eba41ce5e1186e5799c32b2f2a9349a0" name="qt-config" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="48c0af3399e830af7717b59182ace7f481065282fe51c5376a9504a75daf64f4" name="qt-debuginfo" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="65e9fa1d6b18cf06d73a82541eba8b4b3e4603035f20d52b2d4163ac619f5ea5" name="qt-debuginfo" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="4113ffc595df5a3ca20c7fe7b8353574c37e91b8659bb36617483214a91f6cb9" name="qt-demos" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="afe76e56fcd3de6292417c1a4853c9ef5a6d974e7f46cc48f940c375dfc7ecf3" name="qt-demos" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="4540b60ac7d56b69be68b09c36fd93f867372d8c4d5381790a10b60ca583c598" name="qt-devel" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="a59b396d9bbe93252d1635c26b8b68f9d48b404b5f167af1b124dc8e367b54ef" name="qt-devel" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="f7bebf5139d23a52df8eaeec26f6b7420d8ec8c5a43da25d015296bf25b63db8" name="qt-devel-private" arch="noarch">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="42ac6b86b81acba6360524e7b0c84644249674dc40a488197fd2c885140cbf8f" name="qt-devel-private" arch="noarch">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="0b8161d544e4094b32475b7dbd2580f0604c70cb374e0d6292730518a9b5c136" name="qt-doc" arch="noarch">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="08246ba1ace3b6836a7aea8666e8800201977969719c58bf31b9b2053f7ebb74" name="qt-doc" arch="noarch">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="7400f55ca5a87c5500841f1a3ca1b9e0e1aa8689ba3da4247aa7b6fcd125d1e1" name="qt-examples" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="ede9d5f0e1dfb9cbaa9237398c3f97e5a67cf69657a85c4a60e031e1a49b1258" name="qt-examples" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="85194d101e0e2377ce4bd96ec2cd53e793304d0731d7e01379fa093d285f8cd3" name="qt-mysql" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="e7a113fa8ed51cdb41d906f65262e04e4e2c78c7e44e3ae360425bd004ab192c" name="qt-mysql" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="99fb896d53102d153c273e96bb7dd161707ffd3f92c715c9a2171155f42e5cff" name="qt-odbc" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="a5d73bc384448324566c61303e79cbde8d6672a249f25081c8adecd67f168b09" name="qt-odbc" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="d42675d224498cd88dd0758d89d78a40b2ac97efe378e3e2e7eddbfc7995e2e3" name="qt-postgresql" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="ba87ef6b094f2f7b2d1b59b8a7411fbb771b23a4498798325411801fe8eb6f33" name="qt-postgresql" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="11823e02e61f16654adc720f187c305c5213ed091674202bf3539d89f8befff8" name="qt-qdbusviewer" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="a42d36cd8744aaae03faa9b43b7dca782578c7e5ecb583b132ca8ee13c2c8400" name="qt-qdbusviewer" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="e88b67754b20def5a0883266e84767366e3b807c28d9bc13d995b33e292fc2b9" name="qt-qvfb" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="37cea5837fd1b093af318fc9371ae5a0d2b9f6da9f4c179b2915735b5b06e4fc" name="qt-qvfb" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="40a46369c43f101d2b12264639169dccc9bf71ed062b2c97ed1cbd36dceec359" name="qt-x11" arch="i686">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="d4b6f8228a6ed5c3e261e39ec5c3176c501fe1e7f119fd9d74dfbb78d0b75cdb" name="qt-x11" arch="x86_64">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="f7df7d09222e20955aba5149610dc9286448f67be50b3aaaba82960910bf6647" name="qt5-qtbase" arch="i686">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="d67f458e5d4b94a0fddd8d7f209981d1dc9585b8bb3efc0392374e402f9c7a5c" name="qt5-qtbase" arch="src">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="c9e4f72d46446edf80cc1974ec5623eb4cb7bd5ff5f0e394ae3e3cf6d725ec18" name="qt5-qtbase" arch="src">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="7ae99ac31cd3e3366519b4795d6e23671834d1519d46cf2eda73d16a69eb32d6" name="qt5-qtbase" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="5f7070212816fbad1d90982f3018e8d502f2aef0d69501962e8f984150996edd" name="qt5-qtbase-common" arch="noarch">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="b8415fb68474f53403a1047d1fe10022363b84e7f1c6b8f2985130e89717a9c5" name="qt5-qtbase-common" arch="noarch">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="432cd94092a8ecefa344bdd864ff674df4b6fd16da97ff8c25d3f4507e46b878" name="qt5-qtbase-debuginfo" arch="i686">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="ce3465bbc0c558dcb6e46cc782c9da3df451400696c27880da21307daafa7fe6" name="qt5-qtbase-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="28b617cbe4d61e03034785ab991715531f53262d94f6fd3ba308b0da808cf1b6" name="qt5-qtbase-devel" arch="i686">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="a67c3e3ea713de70346491afcf53de5f0c67bfb0b26eb90d85acf1e7a614b68a" name="qt5-qtbase-devel" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="6279b9730aaf0893520d2351db0b10477350c448348e68880aba24f52bb057a5" name="qt5-qtbase-doc" arch="i686">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="c43ea7ff15922edd6e03c7c7b59591ae8880c548a7da864bd11898cc782f5c1d" name="qt5-qtbase-doc" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="f911015db854376f9f53c5c91fc105214ee76810ebb704d50afd62b32b5d3d8b" name="qt5-qtbase-examples" arch="i686">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="ae54498e29650f50fe24f1ed34b0860b41c2c47f82275a69052e560f7c509861" name="qt5-qtbase-examples" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="6ba2aa8b73865725045191bc4786840bb5f11a4ad4abaac6af916d626fa9ffc5" name="qt5-qtbase-gui" arch="i686">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="5805ee01adc5258737077bf7ab9888b691e29e7369fa2439ff41bd392f674d0f" name="qt5-qtbase-gui" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="ceaeb3bc50b18b53190370781d25a33a75f37f1626f86836d567865147641c10" name="qt5-qtbase-mysql" arch="i686">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="31b52fea8228bc5eb03c55a511b079db79b6baa1d70fb6de6bfbcd8c5d0da831" name="qt5-qtbase-mysql" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="26a196ca4a3830dc90fd886ef4e62f5b8001653ba0e5f6175410536bd984a804" name="qt5-qtbase-odbc" arch="i686">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="95b50643955d7a91a46b89d8e04e14343ca2549349c68de2c5199133917ae086" name="qt5-qtbase-odbc" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="faf05ff891db4f022db5ec2e9cc01c3874baf5a89adf55f00489da59adf56eab" name="qt5-qtbase-postgresql" arch="i686">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="840890edc835a331136536faea8311ed7dea8e8430beb81176bc39362cfea8a8" name="qt5-qtbase-postgresql" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="100f27644b030ecadd26f78b5826c48fa4084eb330fa2b1474164c00d0b03796" name="qt5-qtbase-static" arch="i686">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="c6b4ddea1eb48d7a28777dde134ec744bc3b08869c206e1f5975214dcb0a4497" name="qt5-qtbase-static" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="ff2320a3ddf4bc1efb18dc60aa7c5ea45c39fe5a08983f4c5950732e76689105" name="qt5-qtimageformats" arch="i686">
  <version epoch="0" ver="5.9.7" rel="2.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 5.6.0-3" date="1458475200">- rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-4" date="1460030400">- Initial version for RHEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-5" date="1460548800">- Enable documentation
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-1" date="1465387200">- Update to 5.6.1
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-10" date="1472558400">- Increase build version to have newer version than in EPEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.2-1" date="1484136000">- Update to 5.6.2
  Resolves: bz#1384821</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-1" date="1503057600">- Update to 5.9.1
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Update to 5.9.7
  Resolves: bz#1564007</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-2" date="1621944000">- libwebp security fixes:
  Resolves: bz#1961742
  Resolves: bz#1961743
  Resolves: bz#1961744
  Resolves: bz#1961745</changelog>
</package>
<package pkgid="cab463b1db3c1a3b0a693f0eb1dc06df9f35e440c418e9a9e44fea901533ba0f" name="qt5-qtimageformats" arch="src">
  <version epoch="0" ver="5.9.7" rel="2.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 5.6.0-3" date="1458475200">- rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-4" date="1460030400">- Initial version for RHEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-5" date="1460548800">- Enable documentation
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-1" date="1465387200">- Update to 5.6.1
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-10" date="1472558400">- Increase build version to have newer version than in EPEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.2-1" date="1484136000">- Update to 5.6.2
  Resolves: bz#1384821</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-1" date="1503057600">- Update to 5.9.1
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Update to 5.9.7
  Resolves: bz#1564007</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-2" date="1621944000">- libwebp security fixes:
  Resolves: bz#1961742
  Resolves: bz#1961743
  Resolves: bz#1961744
  Resolves: bz#1961745</changelog>
</package>
<package pkgid="45de32d7875487fdcc88c756a36891d9cec069fffb0edab987441bcb7700e7c3" name="qt5-qtimageformats" arch="src">
  <version epoch="0" ver="5.9.7" rel="2.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 5.6.0-3" date="1458475200">- rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-4" date="1460030400">- Initial version for RHEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-5" date="1460548800">- Enable documentation
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-1" date="1465387200">- Update to 5.6.1
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-10" date="1472558400">- Increase build version to have newer version than in EPEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.2-1" date="1484136000">- Update to 5.6.2
  Resolves: bz#1384821</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-1" date="1503057600">- Update to 5.9.1
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Update to 5.9.7
  Resolves: bz#1564007</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-2" date="1621944000">- libwebp security fixes:
  Resolves: bz#1961742
  Resolves: bz#1961743
  Resolves: bz#1961744
  Resolves: bz#1961745</changelog>
</package>
<package pkgid="105d927f77868c7a5bdaeba025db7b4ebd6690fb4f11d5af40904690d38ab0dc" name="qt5-qtimageformats" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="2.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 5.6.0-3" date="1458475200">- rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-4" date="1460030400">- Initial version for RHEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-5" date="1460548800">- Enable documentation
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-1" date="1465387200">- Update to 5.6.1
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-10" date="1472558400">- Increase build version to have newer version than in EPEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.2-1" date="1484136000">- Update to 5.6.2
  Resolves: bz#1384821</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-1" date="1503057600">- Update to 5.9.1
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Update to 5.9.7
  Resolves: bz#1564007</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-2" date="1621944000">- libwebp security fixes:
  Resolves: bz#1961742
  Resolves: bz#1961743
  Resolves: bz#1961744
  Resolves: bz#1961745</changelog>
</package>
<package pkgid="915b782ffac24a166f6aa98ab8b1303901701d4ebf66338cb9e0006e785251d1" name="qt5-qtimageformats-debuginfo" arch="i686">
  <version epoch="0" ver="5.9.7" rel="2.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 5.6.0-3" date="1458475200">- rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-4" date="1460030400">- Initial version for RHEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-5" date="1460548800">- Enable documentation
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-1" date="1465387200">- Update to 5.6.1
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-10" date="1472558400">- Increase build version to have newer version than in EPEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.2-1" date="1484136000">- Update to 5.6.2
  Resolves: bz#1384821</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-1" date="1503057600">- Update to 5.9.1
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Update to 5.9.7
  Resolves: bz#1564007</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-2" date="1621944000">- libwebp security fixes:
  Resolves: bz#1961742
  Resolves: bz#1961743
  Resolves: bz#1961744
  Resolves: bz#1961745</changelog>
</package>
<package pkgid="31bfa623541b810ee7848476d17f8cf30e837dd07faabb383e12b742492f21c1" name="qt5-qtimageformats-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.9.7" rel="2.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 5.6.0-3" date="1458475200">- rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-4" date="1460030400">- Initial version for RHEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-5" date="1460548800">- Enable documentation
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-1" date="1465387200">- Update to 5.6.1
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-10" date="1472558400">- Increase build version to have newer version than in EPEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.2-1" date="1484136000">- Update to 5.6.2
  Resolves: bz#1384821</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-1" date="1503057600">- Update to 5.9.1
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Update to 5.9.7
  Resolves: bz#1564007</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-2" date="1621944000">- libwebp security fixes:
  Resolves: bz#1961742
  Resolves: bz#1961743
  Resolves: bz#1961744
  Resolves: bz#1961745</changelog>
</package>
<package pkgid="c6a4626b96cef5018172525e418bfd9c7bc731c02d516d30c029df8500f62f55" name="qt5-qtimageformats-doc" arch="noarch">
  <version epoch="0" ver="5.9.7" rel="2.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 5.6.0-3" date="1458475200">- rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-4" date="1460030400">- Initial version for RHEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-5" date="1460548800">- Enable documentation
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-1" date="1465387200">- Update to 5.6.1
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-10" date="1472558400">- Increase build version to have newer version than in EPEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.2-1" date="1484136000">- Update to 5.6.2
  Resolves: bz#1384821</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-1" date="1503057600">- Update to 5.9.1
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Update to 5.9.7
  Resolves: bz#1564007</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-2" date="1621944000">- libwebp security fixes:
  Resolves: bz#1961742
  Resolves: bz#1961743
  Resolves: bz#1961744
  Resolves: bz#1961745</changelog>
</package>
<package pkgid="b42879d019eb2e02c16e6c8cd9a7f87bc5c4b26e73bada2b95638f97708d820f" name="qt5-qtimageformats-doc" arch="noarch">
  <version epoch="0" ver="5.9.7" rel="2.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 5.6.0-3" date="1458475200">- rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-4" date="1460030400">- Initial version for RHEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-5" date="1460548800">- Enable documentation
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-1" date="1465387200">- Update to 5.6.1
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-10" date="1472558400">- Increase build version to have newer version than in EPEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.2-1" date="1484136000">- Update to 5.6.2
  Resolves: bz#1384821</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-1" date="1503057600">- Update to 5.9.1
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Update to 5.9.7
  Resolves: bz#1564007</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-2" date="1621944000">- libwebp security fixes:
  Resolves: bz#1961742
  Resolves: bz#1961743
  Resolves: bz#1961744
  Resolves: bz#1961745</changelog>
</package>
<package pkgid="1bf07e46358b4b8691cacbf2a52cbefcda9d1ca0da301ca62bf1771b3cf59cda" name="qt5-rpm-macros" arch="noarch">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="d96ca0c293158782e703102057f760679c1e84a2dbfc91210c0cbe513d65e88f" name="qt5-rpm-macros" arch="noarch">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="0e03f92148869acafaa16ac154c684714fd78a85dbf2a13eedfe1108b45f7fad" name="rdma-core" arch="i686">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="8f222aa2ed3683b7c80690f85c488cc8ef8303c37f65fa0721d0b7b46acf247f" name="rdma-core" arch="src">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="17e53af27f66d7169c5cd7b6c5a0350281aeec26ceb09b85499a1a125bb37106" name="rdma-core" arch="src">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="2134158fc7640f80a31e77a770b08f7db1b7e665aecf6b7cd2b70a7fdb8151fc" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="43c5fd26e11be42222fcc9884d3e261c2bb3b197fe5ce840824b4f371fca47d5" name="rdma-core-debuginfo" arch="i686">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="0818184c1af4026178f97642d25945c33843eab421077167de28df71bc4ce3dd" name="rdma-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="9beabbbc889900a6fe663abf3085d320b54c8681c208499a4f2b8b5e9d009369" name="rdma-core-devel" arch="i686">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="715be4ca62648036d49bcb755325f2faa9f11e7461b1a991772a548c8233bdb6" name="rdma-core-devel" arch="x86_64">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="d61ee9967fc6604c37b0edd95411c884c4903fa97959ea4f2170ce5e2e010912" name="realmd" arch="i686">
  <version epoch="0" ver="0.16.1" rel="12.el7_9.1"/>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-4" date="1441972800">- Fix regressions in 0.16.x releases
- Resolves: rhbz#1258745
- Resolves: rhbz#1258488</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-5" date="1444996800">- Revert 0.16.1-4
- Use samba by default
- Resolves: rhbz#1271618</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-6" date="1467115200">- Resolves: rhbz#1258745
- Resolves: rhbz#1258488
- Resolves: rhbz#1267563
- Resolves: rhbz#1293390
- Resolves: rhbz#1273924
- Resolves: rhbz#1274368
- Resolves: rhbz#1291924</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-7" date="1469448000">doc: add computer-name to realm man page
- Related: rhbz#1293390</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-8" date="1469620800">Fix man page reference in systemd service file
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-9" date="1473249600">Rebuild to fix wrong doc path
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-10" date="1528977600">Use current Samba options and read NetBIOS name from keytab
- Resolves: rhbz#1484072
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-11" date="1534852800">Improve fix for rhbz#1370457 and fix Coverity issues
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12" date="1588939200">Fixes for RHEL-7.9
- Resolves: rhbz#1625001
- Resolves: rhbz#1625005
- Resolves: rhbz#1638396
- Resolves: rhbz#1714223
- Resolves: rhbz#1832134</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12.1" date="1606305600">use 'additional dns hostnames' with net ads join
- Resolves: rhbz#1849696</changelog>
</package>
<package pkgid="d5e5fd5a3d510f8ed92fc11b03edbfc85b9ae755b7aa2f18522ca1182c7d070e" name="realmd" arch="src">
  <version epoch="0" ver="0.16.1" rel="12.el7_9.1"/>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-4" date="1441972800">- Fix regressions in 0.16.x releases
- Resolves: rhbz#1258745
- Resolves: rhbz#1258488</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-5" date="1444996800">- Revert 0.16.1-4
- Use samba by default
- Resolves: rhbz#1271618</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-6" date="1467115200">- Resolves: rhbz#1258745
- Resolves: rhbz#1258488
- Resolves: rhbz#1267563
- Resolves: rhbz#1293390
- Resolves: rhbz#1273924
- Resolves: rhbz#1274368
- Resolves: rhbz#1291924</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-7" date="1469448000">doc: add computer-name to realm man page
- Related: rhbz#1293390</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-8" date="1469620800">Fix man page reference in systemd service file
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-9" date="1473249600">Rebuild to fix wrong doc path
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-10" date="1528977600">Use current Samba options and read NetBIOS name from keytab
- Resolves: rhbz#1484072
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-11" date="1534852800">Improve fix for rhbz#1370457 and fix Coverity issues
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12" date="1588939200">Fixes for RHEL-7.9
- Resolves: rhbz#1625001
- Resolves: rhbz#1625005
- Resolves: rhbz#1638396
- Resolves: rhbz#1714223
- Resolves: rhbz#1832134</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12.1" date="1606305600">use 'additional dns hostnames' with net ads join
- Resolves: rhbz#1849696</changelog>
</package>
<package pkgid="8caa152355d2be6800e1088d6e82ab3eee6b064f688efb650729b57265de3d6d" name="realmd" arch="src">
  <version epoch="0" ver="0.16.1" rel="12.el7_9.1"/>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-4" date="1441972800">- Fix regressions in 0.16.x releases
- Resolves: rhbz#1258745
- Resolves: rhbz#1258488</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-5" date="1444996800">- Revert 0.16.1-4
- Use samba by default
- Resolves: rhbz#1271618</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-6" date="1467115200">- Resolves: rhbz#1258745
- Resolves: rhbz#1258488
- Resolves: rhbz#1267563
- Resolves: rhbz#1293390
- Resolves: rhbz#1273924
- Resolves: rhbz#1274368
- Resolves: rhbz#1291924</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-7" date="1469448000">doc: add computer-name to realm man page
- Related: rhbz#1293390</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-8" date="1469620800">Fix man page reference in systemd service file
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-9" date="1473249600">Rebuild to fix wrong doc path
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-10" date="1528977600">Use current Samba options and read NetBIOS name from keytab
- Resolves: rhbz#1484072
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-11" date="1534852800">Improve fix for rhbz#1370457 and fix Coverity issues
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12" date="1588939200">Fixes for RHEL-7.9
- Resolves: rhbz#1625001
- Resolves: rhbz#1625005
- Resolves: rhbz#1638396
- Resolves: rhbz#1714223
- Resolves: rhbz#1832134</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12.1" date="1606305600">use 'additional dns hostnames' with net ads join
- Resolves: rhbz#1849696</changelog>
</package>
<package pkgid="0f0acd912652e7d40489c3b57428fc79425d3cd0a0a5fc13f293ba6188d97a82" name="realmd" arch="x86_64">
  <version epoch="0" ver="0.16.1" rel="12.el7_9.1"/>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-4" date="1441972800">- Fix regressions in 0.16.x releases
- Resolves: rhbz#1258745
- Resolves: rhbz#1258488</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-5" date="1444996800">- Revert 0.16.1-4
- Use samba by default
- Resolves: rhbz#1271618</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-6" date="1467115200">- Resolves: rhbz#1258745
- Resolves: rhbz#1258488
- Resolves: rhbz#1267563
- Resolves: rhbz#1293390
- Resolves: rhbz#1273924
- Resolves: rhbz#1274368
- Resolves: rhbz#1291924</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-7" date="1469448000">doc: add computer-name to realm man page
- Related: rhbz#1293390</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-8" date="1469620800">Fix man page reference in systemd service file
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-9" date="1473249600">Rebuild to fix wrong doc path
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-10" date="1528977600">Use current Samba options and read NetBIOS name from keytab
- Resolves: rhbz#1484072
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-11" date="1534852800">Improve fix for rhbz#1370457 and fix Coverity issues
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12" date="1588939200">Fixes for RHEL-7.9
- Resolves: rhbz#1625001
- Resolves: rhbz#1625005
- Resolves: rhbz#1638396
- Resolves: rhbz#1714223
- Resolves: rhbz#1832134</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12.1" date="1606305600">use 'additional dns hostnames' with net ads join
- Resolves: rhbz#1849696</changelog>
</package>
<package pkgid="bea00155081288bff060b4bdf08c8276a00d7e1d5e81624b294bb16b21def891" name="realmd-debuginfo" arch="i686">
  <version epoch="0" ver="0.16.1" rel="12.el7_9.1"/>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-4" date="1441972800">- Fix regressions in 0.16.x releases
- Resolves: rhbz#1258745
- Resolves: rhbz#1258488</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-5" date="1444996800">- Revert 0.16.1-4
- Use samba by default
- Resolves: rhbz#1271618</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-6" date="1467115200">- Resolves: rhbz#1258745
- Resolves: rhbz#1258488
- Resolves: rhbz#1267563
- Resolves: rhbz#1293390
- Resolves: rhbz#1273924
- Resolves: rhbz#1274368
- Resolves: rhbz#1291924</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-7" date="1469448000">doc: add computer-name to realm man page
- Related: rhbz#1293390</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-8" date="1469620800">Fix man page reference in systemd service file
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-9" date="1473249600">Rebuild to fix wrong doc path
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-10" date="1528977600">Use current Samba options and read NetBIOS name from keytab
- Resolves: rhbz#1484072
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-11" date="1534852800">Improve fix for rhbz#1370457 and fix Coverity issues
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12" date="1588939200">Fixes for RHEL-7.9
- Resolves: rhbz#1625001
- Resolves: rhbz#1625005
- Resolves: rhbz#1638396
- Resolves: rhbz#1714223
- Resolves: rhbz#1832134</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12.1" date="1606305600">use 'additional dns hostnames' with net ads join
- Resolves: rhbz#1849696</changelog>
</package>
<package pkgid="a87746d2590a995e1f67cc1685bd60ce8a221a8764663eaef3085d5f9971df0e" name="realmd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16.1" rel="12.el7_9.1"/>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-4" date="1441972800">- Fix regressions in 0.16.x releases
- Resolves: rhbz#1258745
- Resolves: rhbz#1258488</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-5" date="1444996800">- Revert 0.16.1-4
- Use samba by default
- Resolves: rhbz#1271618</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-6" date="1467115200">- Resolves: rhbz#1258745
- Resolves: rhbz#1258488
- Resolves: rhbz#1267563
- Resolves: rhbz#1293390
- Resolves: rhbz#1273924
- Resolves: rhbz#1274368
- Resolves: rhbz#1291924</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-7" date="1469448000">doc: add computer-name to realm man page
- Related: rhbz#1293390</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-8" date="1469620800">Fix man page reference in systemd service file
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-9" date="1473249600">Rebuild to fix wrong doc path
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-10" date="1528977600">Use current Samba options and read NetBIOS name from keytab
- Resolves: rhbz#1484072
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-11" date="1534852800">Improve fix for rhbz#1370457 and fix Coverity issues
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12" date="1588939200">Fixes for RHEL-7.9
- Resolves: rhbz#1625001
- Resolves: rhbz#1625005
- Resolves: rhbz#1638396
- Resolves: rhbz#1714223
- Resolves: rhbz#1832134</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12.1" date="1606305600">use 'additional dns hostnames' with net ads join
- Resolves: rhbz#1849696</changelog>
</package>
<package pkgid="d3b4e9ce5aade6e9cb3ee9b348a7f8cce05b0620ae9378691e65c932fced0402" name="realmd-devel-docs" arch="i686">
  <version epoch="0" ver="0.16.1" rel="12.el7_9.1"/>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-4" date="1441972800">- Fix regressions in 0.16.x releases
- Resolves: rhbz#1258745
- Resolves: rhbz#1258488</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-5" date="1444996800">- Revert 0.16.1-4
- Use samba by default
- Resolves: rhbz#1271618</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-6" date="1467115200">- Resolves: rhbz#1258745
- Resolves: rhbz#1258488
- Resolves: rhbz#1267563
- Resolves: rhbz#1293390
- Resolves: rhbz#1273924
- Resolves: rhbz#1274368
- Resolves: rhbz#1291924</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-7" date="1469448000">doc: add computer-name to realm man page
- Related: rhbz#1293390</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-8" date="1469620800">Fix man page reference in systemd service file
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-9" date="1473249600">Rebuild to fix wrong doc path
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-10" date="1528977600">Use current Samba options and read NetBIOS name from keytab
- Resolves: rhbz#1484072
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-11" date="1534852800">Improve fix for rhbz#1370457 and fix Coverity issues
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12" date="1588939200">Fixes for RHEL-7.9
- Resolves: rhbz#1625001
- Resolves: rhbz#1625005
- Resolves: rhbz#1638396
- Resolves: rhbz#1714223
- Resolves: rhbz#1832134</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12.1" date="1606305600">use 'additional dns hostnames' with net ads join
- Resolves: rhbz#1849696</changelog>
</package>
<package pkgid="8f171317b498cb3cc792e1ce2ec170d2f4d9e3fcd0166738bff9bca23a636b81" name="realmd-devel-docs" arch="x86_64">
  <version epoch="0" ver="0.16.1" rel="12.el7_9.1"/>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-4" date="1441972800">- Fix regressions in 0.16.x releases
- Resolves: rhbz#1258745
- Resolves: rhbz#1258488</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-5" date="1444996800">- Revert 0.16.1-4
- Use samba by default
- Resolves: rhbz#1271618</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-6" date="1467115200">- Resolves: rhbz#1258745
- Resolves: rhbz#1258488
- Resolves: rhbz#1267563
- Resolves: rhbz#1293390
- Resolves: rhbz#1273924
- Resolves: rhbz#1274368
- Resolves: rhbz#1291924</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-7" date="1469448000">doc: add computer-name to realm man page
- Related: rhbz#1293390</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-8" date="1469620800">Fix man page reference in systemd service file
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-9" date="1473249600">Rebuild to fix wrong doc path
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-10" date="1528977600">Use current Samba options and read NetBIOS name from keytab
- Resolves: rhbz#1484072
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-11" date="1534852800">Improve fix for rhbz#1370457 and fix Coverity issues
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12" date="1588939200">Fixes for RHEL-7.9
- Resolves: rhbz#1625001
- Resolves: rhbz#1625005
- Resolves: rhbz#1638396
- Resolves: rhbz#1714223
- Resolves: rhbz#1832134</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12.1" date="1606305600">use 'additional dns hostnames' with net ads join
- Resolves: rhbz#1849696</changelog>
</package>
<package pkgid="3100548c49899552edc68925587b8f424be2c6a076481e3c0709817b0251e1ea" name="rear" arch="i686">
  <version epoch="0" ver="2.4" rel="15.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
</package>
<package pkgid="464c7cb10b6ee3e54a6b2299e16af6ba069491c8e5156c99a52488c51b49f8c5" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="15.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
</package>
<package pkgid="4f352af2741b3cb606bac8f8b4b06708e40855d71688080e33d86fc806ba7fdf" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="15.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
</package>
<package pkgid="30d5c7317d46264463c50e8c7b745605777e53bed77fb13ace9a93eab2ee4a63" name="rear" arch="x86_64">
  <version epoch="0" ver="2.4" rel="15.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
</package>
<package pkgid="7e202606c43704e2bb97a6af04e067612bc095ea50555f4e6675e18859d94e0e" name="rear" arch="i686">
  <version epoch="0" ver="2.4" rel="16.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
</package>
<package pkgid="827c1a721b75aa13f39699c4737e3128ed027b93d3a8999e89e7bb7f4a8c337d" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="16.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
</package>
<package pkgid="d61caac9556808aeea865cf848d98eb713b9a0f5c029a82f16b0794f742c59e3" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="16.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
</package>
<package pkgid="cb49314b3ae21e6ea4da75154d575040fc4e7c8baf7ca6a89947ef4e9133881b" name="rear" arch="x86_64">
  <version epoch="0" ver="2.4" rel="16.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
</package>
<package pkgid="54b0c14acd7b546a1921b0db9da899cd59b68efa46a0e47537223288dce0114d" name="rear" arch="i686">
  <version epoch="0" ver="2.4" rel="17.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-17" date="1687176000">- Apply PR2431 to migrate XFS configuration files
- Fix typo in default.conf
  Resolves: #1882060</changelog>
</package>
<package pkgid="fade19c52ea131ae8a2194fd753e5b06bcaf278588013e884905617b2d9ddb9a" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="17.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-17" date="1687176000">- Apply PR2431 to migrate XFS configuration files
- Fix typo in default.conf
  Resolves: #1882060</changelog>
</package>
<package pkgid="6ef018008424f0b02889f217a06e5d847253c8f268d66406f3c12dfe626af76c" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="17.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-17" date="1687176000">- Apply PR2431 to migrate XFS configuration files
- Fix typo in default.conf
  Resolves: #1882060</changelog>
</package>
<package pkgid="7a03d388e0cd669c5c993a8103adeb2bfb0e3e3a171ef1588d02a95448f38b5a" name="rear" arch="x86_64">
  <version epoch="0" ver="2.4" rel="17.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-17" date="1687176000">- Apply PR2431 to migrate XFS configuration files
- Fix typo in default.conf
  Resolves: #1882060</changelog>
</package>
<package pkgid="308a6057c09d49d8b4526b47e913349cc1323805f88d6f051418e34ece1702c6" name="rear-debuginfo" arch="i686">
  <version epoch="0" ver="2.4" rel="15.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
</package>
<package pkgid="e4abfa7339f58782e9490f499cdd6509a6f7f31cb3efc1f517b7eb5fd3746ab3" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4" rel="15.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
</package>
<package pkgid="3b80da4aa046815dad1780681ffcb79769229aa6270339f1817267a173685500" name="rear-debuginfo" arch="i686">
  <version epoch="0" ver="2.4" rel="16.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
</package>
<package pkgid="a81f9ca5146fc5bc12708cacc291a79c788765199692abd6da8d05a4f5a41ed5" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4" rel="16.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
</package>
<package pkgid="6da083278849c5e629aca8668e6113c8d328938bbe234d0bff57179bffa06be9" name="rear-debuginfo" arch="i686">
  <version epoch="0" ver="2.4" rel="17.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-17" date="1687176000">- Apply PR2431 to migrate XFS configuration files
- Fix typo in default.conf
  Resolves: #1882060</changelog>
</package>
<package pkgid="16597bc75be9c89c7fa272224297ba411c947bc11768603002a4ede95155f7bd" name="rear-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4" rel="17.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-17" date="1687176000">- Apply PR2431 to migrate XFS configuration files
- Fix typo in default.conf
  Resolves: #1882060</changelog>
</package>
<package pkgid="fe6afe51c6dc664603254870b235718e2ef2c6927da3779ba704a8ece466d4af" name="redhat-support-lib-python" arch="noarch">
  <version epoch="0" ver="0.13.0" rel="0.el7_9"/>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.5-8" date="1376222400">- Resolves: rhbz#987168</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-0" date="1393416000">- Various fixes</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-1" date="1403179200">- Display download progess for attachments</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-3" date="1409918400">- Fix proxy upload attachment</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.7-0" date="1413806400">- Proxy fix for file uploads
- Get a specific case group</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-3" date="1420632000">- Resolves: rhbz#1176473 - FTP upload via proxy
- Small changes to download progress</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-6" date="1467720000">- Resolves: rhbz#1314606 - show progress with addattachment
- Resolves: rhbz#1314607 - problem with addattachment -s switch</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.8-1" date="1495713600">- Correcting changelog</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.12.1-1" date="1566820800">- Resolves: rhbz#1669454 - connection.py uses incorrect base64 encoding method</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.13.0-0" date="1642766400">- Resolves: rhbz#1653574- Add support for handling JSON response from API's
- Resolves: rhbz#1765391- Add support to upload to and download from S3
- Resolves: rhbz#2030066- RHST should use new Red Hat Secure FTP instead of dropbox for attachments</changelog>
</package>
<package pkgid="c3e00e7d6221bae22f8d97ad643c0fabb310291e51ee873c1667733d813c6899" name="redhat-support-lib-python" arch="noarch">
  <version epoch="0" ver="0.13.0" rel="0.el7_9"/>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.5-8" date="1376222400">- Resolves: rhbz#987168</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-0" date="1393416000">- Various fixes</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-1" date="1403179200">- Display download progess for attachments</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-3" date="1409918400">- Fix proxy upload attachment</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.7-0" date="1413806400">- Proxy fix for file uploads
- Get a specific case group</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-3" date="1420632000">- Resolves: rhbz#1176473 - FTP upload via proxy
- Small changes to download progress</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-6" date="1467720000">- Resolves: rhbz#1314606 - show progress with addattachment
- Resolves: rhbz#1314607 - problem with addattachment -s switch</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.8-1" date="1495713600">- Correcting changelog</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.12.1-1" date="1566820800">- Resolves: rhbz#1669454 - connection.py uses incorrect base64 encoding method</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.13.0-0" date="1642766400">- Resolves: rhbz#1653574- Add support for handling JSON response from API's
- Resolves: rhbz#1765391- Add support to upload to and download from S3
- Resolves: rhbz#2030066- RHST should use new Red Hat Secure FTP instead of dropbox for attachments</changelog>
</package>
<package pkgid="98ff572a204c8d74d0d6bc455640588e7b4bf84d321beecd143e5fb7f1e24b62" name="redhat-support-lib-python" arch="src">
  <version epoch="0" ver="0.13.0" rel="0.el7_9"/>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.5-8" date="1376222400">- Resolves: rhbz#987168</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-0" date="1393416000">- Various fixes</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-1" date="1403179200">- Display download progess for attachments</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-3" date="1409918400">- Fix proxy upload attachment</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.7-0" date="1413806400">- Proxy fix for file uploads
- Get a specific case group</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-3" date="1420632000">- Resolves: rhbz#1176473 - FTP upload via proxy
- Small changes to download progress</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-6" date="1467720000">- Resolves: rhbz#1314606 - show progress with addattachment
- Resolves: rhbz#1314607 - problem with addattachment -s switch</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.8-1" date="1495713600">- Correcting changelog</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.12.1-1" date="1566820800">- Resolves: rhbz#1669454 - connection.py uses incorrect base64 encoding method</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.13.0-0" date="1642766400">- Resolves: rhbz#1653574- Add support for handling JSON response from API's
- Resolves: rhbz#1765391- Add support to upload to and download from S3
- Resolves: rhbz#2030066- RHST should use new Red Hat Secure FTP instead of dropbox for attachments</changelog>
</package>
<package pkgid="2f236cb32b566131aba2de81e5229577849b9d9f9b4fe0bddeaadc06629a9ad7" name="redhat-support-lib-python" arch="src">
  <version epoch="0" ver="0.13.0" rel="0.el7_9"/>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.5-8" date="1376222400">- Resolves: rhbz#987168</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-0" date="1393416000">- Various fixes</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-1" date="1403179200">- Display download progess for attachments</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.6-3" date="1409918400">- Fix proxy upload attachment</changelog>
  <changelog author="Keith Robertson &lt;kroberts@redhat.com&gt; - 0.9.7-0" date="1413806400">- Proxy fix for file uploads
- Get a specific case group</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-3" date="1420632000">- Resolves: rhbz#1176473 - FTP upload via proxy
- Small changes to download progress</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-6" date="1467720000">- Resolves: rhbz#1314606 - show progress with addattachment
- Resolves: rhbz#1314607 - problem with addattachment -s switch</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.8-1" date="1495713600">- Correcting changelog</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.12.1-1" date="1566820800">- Resolves: rhbz#1669454 - connection.py uses incorrect base64 encoding method</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.13.0-0" date="1642766400">- Resolves: rhbz#1653574- Add support for handling JSON response from API's
- Resolves: rhbz#1765391- Add support to upload to and download from S3
- Resolves: rhbz#2030066- RHST should use new Red Hat Secure FTP instead of dropbox for attachments</changelog>
</package>
<package pkgid="f1543b711eecd6f4510b71f32f9bd80642cefb6dfbd2503d3064e7dbe509811f" name="redhat-support-tool" arch="noarch">
  <version epoch="0" ver="0.13.0" rel="0.el7_9"/>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-3" date="1420632000">- Resolves: rhbz#1168414 - rhel7 vmcore offset
- Resolves: rhbz#1174461 - skip already downloaded attachments
- Resolves: rhbz#1176473 - fix addattachment via FTP and proxy
- Make debug_repos configurable via config option</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-4" date="1425470400">- Resolves: rhbz#1196297 - typos in opencase
- Resolves: rhbz#1196316 - change menus when closing a case
- Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
- Other small fixes</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.8-6" date="1467720000">- Resolves: rhbz#1104344 - add soscleaner
- Resolves: rhbz#1273976 - caches bad password
- Resolves: rhbz#1284306 - improve ? help
- Resolves: rhbz#1284308 - show attachment sizes
- Resolves: rhbz#1284309 - show attachment full path
- Resolves: rhbz#1284314 - differentiate diagnose and analyze
- Resolves: rhbz#1290909 - change case internal status
- Resolves: rhbz#1351141 - reverse severity list</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-1" date="1493294400">- Resolves: rhbz#1380109 - Include creation date and last modified date in Solution title details.
- Resolves: rhbz#1342628 - When opening a new case, offer a default product.
- Resolves: rhbz#1342632 - When opening a new case, offer to use the default case group of that user.</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-2" date="1495713600">- Resolves: rhbz#1380109 - Include last modified date for solutions in non-interactive mode search</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-3" date="1496232000">- Resolves: rhbz#1380109 - Correcting spacing in non-interactive mode search results.</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.10-1" date="1509624000">- Resolves: rhbz#1342627 - List cases by group.
- Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.9.11-1" date="1553515200">- Resolves: rhbz#1418701 - [RFE] Add functionality to generate and send sosreport after selecting the case
- Resolves: rhbz#1592850 - [RFE] Generate and upload sosreport to case from cli
- Resolves: rhbz#1678347 - Update redhat-support-tool to use latest soscleaner
- Resolves: rhbz#1670033 - redhat-support-tool env var http_proxy does not work with user and password
- Resolves: rhbz#1457436 -  [RFE][RHEL7] Include Reason in cases of failed proxy</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.12.2-1" date="1566907200">- Resolves: rhbz#1547763 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.13.0-0" date="1643025600">- Resolves: rhbz#2030063- Add support for handling JSON response from API's 
- Resolves: rhbz#1765392- Add support to upload to and download from S3
- Resolves: rhbz#2030065- RHST should use new Red Hat Secure FTP instead of dropbox for attachments</changelog>
</package>
<package pkgid="8b9494e9b5637761c0e31d2a447172b1ac70900546f89fe613acc8acad9844f1" name="redhat-support-tool" arch="noarch">
  <version epoch="0" ver="0.13.0" rel="0.el7_9"/>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-3" date="1420632000">- Resolves: rhbz#1168414 - rhel7 vmcore offset
- Resolves: rhbz#1174461 - skip already downloaded attachments
- Resolves: rhbz#1176473 - fix addattachment via FTP and proxy
- Make debug_repos configurable via config option</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-4" date="1425470400">- Resolves: rhbz#1196297 - typos in opencase
- Resolves: rhbz#1196316 - change menus when closing a case
- Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
- Other small fixes</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.8-6" date="1467720000">- Resolves: rhbz#1104344 - add soscleaner
- Resolves: rhbz#1273976 - caches bad password
- Resolves: rhbz#1284306 - improve ? help
- Resolves: rhbz#1284308 - show attachment sizes
- Resolves: rhbz#1284309 - show attachment full path
- Resolves: rhbz#1284314 - differentiate diagnose and analyze
- Resolves: rhbz#1290909 - change case internal status
- Resolves: rhbz#1351141 - reverse severity list</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-1" date="1493294400">- Resolves: rhbz#1380109 - Include creation date and last modified date in Solution title details.
- Resolves: rhbz#1342628 - When opening a new case, offer a default product.
- Resolves: rhbz#1342632 - When opening a new case, offer to use the default case group of that user.</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-2" date="1495713600">- Resolves: rhbz#1380109 - Include last modified date for solutions in non-interactive mode search</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-3" date="1496232000">- Resolves: rhbz#1380109 - Correcting spacing in non-interactive mode search results.</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.10-1" date="1509624000">- Resolves: rhbz#1342627 - List cases by group.
- Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.9.11-1" date="1553515200">- Resolves: rhbz#1418701 - [RFE] Add functionality to generate and send sosreport after selecting the case
- Resolves: rhbz#1592850 - [RFE] Generate and upload sosreport to case from cli
- Resolves: rhbz#1678347 - Update redhat-support-tool to use latest soscleaner
- Resolves: rhbz#1670033 - redhat-support-tool env var http_proxy does not work with user and password
- Resolves: rhbz#1457436 -  [RFE][RHEL7] Include Reason in cases of failed proxy</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.12.2-1" date="1566907200">- Resolves: rhbz#1547763 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.13.0-0" date="1643025600">- Resolves: rhbz#2030063- Add support for handling JSON response from API's 
- Resolves: rhbz#1765392- Add support to upload to and download from S3
- Resolves: rhbz#2030065- RHST should use new Red Hat Secure FTP instead of dropbox for attachments</changelog>
</package>
<package pkgid="dc370229c793afb694107aecfdca23154f3cec07fa2238ac503236b516a8c7c7" name="redhat-support-tool" arch="src">
  <version epoch="0" ver="0.13.0" rel="0.el7_9"/>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-3" date="1420632000">- Resolves: rhbz#1168414 - rhel7 vmcore offset
- Resolves: rhbz#1174461 - skip already downloaded attachments
- Resolves: rhbz#1176473 - fix addattachment via FTP and proxy
- Make debug_repos configurable via config option</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-4" date="1425470400">- Resolves: rhbz#1196297 - typos in opencase
- Resolves: rhbz#1196316 - change menus when closing a case
- Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
- Other small fixes</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.8-6" date="1467720000">- Resolves: rhbz#1104344 - add soscleaner
- Resolves: rhbz#1273976 - caches bad password
- Resolves: rhbz#1284306 - improve ? help
- Resolves: rhbz#1284308 - show attachment sizes
- Resolves: rhbz#1284309 - show attachment full path
- Resolves: rhbz#1284314 - differentiate diagnose and analyze
- Resolves: rhbz#1290909 - change case internal status
- Resolves: rhbz#1351141 - reverse severity list</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-1" date="1493294400">- Resolves: rhbz#1380109 - Include creation date and last modified date in Solution title details.
- Resolves: rhbz#1342628 - When opening a new case, offer a default product.
- Resolves: rhbz#1342632 - When opening a new case, offer to use the default case group of that user.</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-2" date="1495713600">- Resolves: rhbz#1380109 - Include last modified date for solutions in non-interactive mode search</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-3" date="1496232000">- Resolves: rhbz#1380109 - Correcting spacing in non-interactive mode search results.</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.10-1" date="1509624000">- Resolves: rhbz#1342627 - List cases by group.
- Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.9.11-1" date="1553515200">- Resolves: rhbz#1418701 - [RFE] Add functionality to generate and send sosreport after selecting the case
- Resolves: rhbz#1592850 - [RFE] Generate and upload sosreport to case from cli
- Resolves: rhbz#1678347 - Update redhat-support-tool to use latest soscleaner
- Resolves: rhbz#1670033 - redhat-support-tool env var http_proxy does not work with user and password
- Resolves: rhbz#1457436 -  [RFE][RHEL7] Include Reason in cases of failed proxy</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.12.2-1" date="1566907200">- Resolves: rhbz#1547763 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.13.0-0" date="1643025600">- Resolves: rhbz#2030063- Add support for handling JSON response from API's 
- Resolves: rhbz#1765392- Add support to upload to and download from S3
- Resolves: rhbz#2030065- RHST should use new Red Hat Secure FTP instead of dropbox for attachments</changelog>
</package>
<package pkgid="efe929de20f4e172cae8aee8d123a0d2be6d53eae7f7ce8012be56323ead6058" name="redhat-support-tool" arch="src">
  <version epoch="0" ver="0.13.0" rel="0.el7_9"/>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-3" date="1420632000">- Resolves: rhbz#1168414 - rhel7 vmcore offset
- Resolves: rhbz#1174461 - skip already downloaded attachments
- Resolves: rhbz#1176473 - fix addattachment via FTP and proxy
- Make debug_repos configurable via config option</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.7-4" date="1425470400">- Resolves: rhbz#1196297 - typos in opencase
- Resolves: rhbz#1196316 - change menus when closing a case
- Fallback to ownerSSOName if associateSSOName filter gets 404 error in listcases
- Other small fixes</changelog>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 0.9.8-6" date="1467720000">- Resolves: rhbz#1104344 - add soscleaner
- Resolves: rhbz#1273976 - caches bad password
- Resolves: rhbz#1284306 - improve ? help
- Resolves: rhbz#1284308 - show attachment sizes
- Resolves: rhbz#1284309 - show attachment full path
- Resolves: rhbz#1284314 - differentiate diagnose and analyze
- Resolves: rhbz#1290909 - change case internal status
- Resolves: rhbz#1351141 - reverse severity list</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-1" date="1493294400">- Resolves: rhbz#1380109 - Include creation date and last modified date in Solution title details.
- Resolves: rhbz#1342628 - When opening a new case, offer a default product.
- Resolves: rhbz#1342632 - When opening a new case, offer to use the default case group of that user.</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-2" date="1495713600">- Resolves: rhbz#1380109 - Include last modified date for solutions in non-interactive mode search</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.9-3" date="1496232000">- Resolves: rhbz#1380109 - Correcting spacing in non-interactive mode search results.</changelog>
  <changelog author="Vikas Rathee &lt;vrathee@redhat.com&gt; - 0.9.10-1" date="1509624000">- Resolves: rhbz#1342627 - List cases by group.
- Resolves: rhbz#1379619 - Inform when http_proxy environment variable is used.</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.9.11-1" date="1553515200">- Resolves: rhbz#1418701 - [RFE] Add functionality to generate and send sosreport after selecting the case
- Resolves: rhbz#1592850 - [RFE] Generate and upload sosreport to case from cli
- Resolves: rhbz#1678347 - Update redhat-support-tool to use latest soscleaner
- Resolves: rhbz#1670033 - redhat-support-tool env var http_proxy does not work with user and password
- Resolves: rhbz#1457436 -  [RFE][RHEL7] Include Reason in cases of failed proxy</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.12.2-1" date="1566907200">- Resolves: rhbz#1547763 - redhat-support-tool: UnboundLocalError: local variable 'timer' referenced before assignment</changelog>
  <changelog author="Pranita Ghole &lt;pghole@redhat.com&gt; - 0.13.0-0" date="1643025600">- Resolves: rhbz#2030063- Add support for handling JSON response from API's 
- Resolves: rhbz#1765392- Add support to upload to and download from S3
- Resolves: rhbz#2030065- RHST should use new Red Hat Secure FTP instead of dropbox for attachments</changelog>
</package>
<package pkgid="daeee81f09abc6bee1f63e4479e110b567447cea99a52a178f0174c368eecff7" name="resource-agents" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="5462b9284067499c2d5f7add66d92a0904c66dd57e7c054fe9741c14b0312e62" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="574c12abebcaebdd5c1af3108f2fe8c4485dbead3d05b44db7e8338607e43aed" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="c978aa52775f494f81f9f409a6b545d4a380f3445f4a7daf39d01efc6b75e833" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="9c9a40b60fe6d12394431defc29baae227ca54cd34a3afd836e89f7aa07a452a" name="resource-agents" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="88580885e3bfe2d7adf833e61b72631b8e6740b49b9fa5f82858b049044e6e6c" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="c1a73e46dc8ba0d9f80b93ca5bd4458496b05a882b0ca510c4146859fa2cf476" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="8323e8cb6a9eba4568f434145ec7f0bd525483d1924caba4b44a2b978ee6c8d0" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="6ea08a17be6eab72be1a6d6721033d0f4b7a247f90c2f809379f38aff44ede18" name="resource-agents" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="96fdb327e7a72f611ae0c0ae3aba21f147d28c144fef6c50620c19cdade45895" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="d3a94aa0eaa666e4955c8d92499bdf897b918a63c6cf51aea6c78b334ad84fc8" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="db74607802c7b39238bff39ee2b5498a1148e7deba72dc556f06f746ea2a91ec" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="0045e480db46ce61d02e220073ea6decf8ce2ad7a3ac7896b0436179d0bded5b" name="resource-agents" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="5a73aa3507bb1c11751b35d53a79db900b0d5ee4a5d7697efa4ee4ce646017a0" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="a70e01139c1091b841b3281337330a45209722910f9355c0876255c8bbf762ad" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="e95eac97d4f0e2d77ffc3f078172764e0d3ecf96bde89c3abbdd92dc3aae4ee8" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="8e0f36225875a8efad65a4b7d344c789bc2319396aac32ea7f3f6ce8d2530138" name="resource-agents" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="7510846cd4f648835ef952f646552e1aca803c1605e75c211e85da70a463ed38" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="cd36f5ce300b7fc5a673020a8b57cc5b2693fc97ba964dcce274cc22c24cf0c1" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="135cdb571a05805cf8d7b2674d725a76551d2eb2ab2357eed5c7f3f8c9fcfd2b" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="cc82e90d9a9fba9b7cb222eb0f363a739dc5edc7e7e22fa4e9e71a32d6698899" name="resource-agents" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="a4bcb6b02264a4d55f93bf50b051f7d510caafc78096327a5035b9512079b142" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="e65e55922d6f3a45b0abd26e247a2e67391d3b620cb5b9640618fb4300ee193c" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="3e58a51ebddc4fa679b9a2546f9b22807aeb842c0b72b849ea9ef8ae21406de3" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="97834e7b8882fa931a42eaa6f29c118d649c767c433400ff95f8cd9d0f106d6f" name="resource-agents" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="eee6867a36db9e7395e5ea77e2158a187334ce0273d1d9fbf5fc4c9e15ec7729" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="d97dad122534909d5abab8fb5b99254219994b07bb6387a81db3afbb02f7adf6" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="012e187b1095b455187588f3fa2ddc07975bee2750c03ffb825a6dd06ba4051c" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="d2ad0d29a802a188d95842172f330445797c30080b2fd1d02c8e5b8dbce13cda" name="resource-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="06a9548e70e545f00aeca8447a92e9c96b29d94d8544a1260e6af72d9f95a75a" name="resource-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="54ebadf766e8edf079273dfea3835e0b722393062917987dd21a4f7716412a33" name="resource-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="584c2fc184b93c55f4086b8c7a8e1115916dbb03cfb1759f7d0e2663cfe65fa3" name="resource-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="5645cb5c12b5b9d7e508d0b89c69268c27566f1e86e5c8cad5627e1612877d48" name="resource-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="f91febe497212be7f710d052b8ebbc9f7ff82f829bb56bc4d5a205a41bb97917" name="resource-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="d78e6468671fd0a9960eb64341c1e768fc1a38e556e1df7db4ceb53281f8718c" name="resource-agents-aliyun" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="05dbb9059c7ebaa0995083943c953299843aa77aa74726bdb667bbb69eb5c4ad" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="2b2005cc026a8b28172a565f629f5aa123f0ebe68c23b730db4be8bcc62a2458" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="508b88c004debc6c5364ecc89c0fb27b7b928f51036028c1f9471672cd83ac05" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="23f997a33ef07f6cc582da4819ffaca52da270db862d80173cb3b71a437d3b74" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="11f000832d3ce80aa967ec60b29226d8809b0378bcc7eced92696e4158a6d620" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="cb8938cdbbec2de568c500a096037ff816fbdd33c5ab2e0bb81d4566d07a2920" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="e22a163bc853465218efd41527862c0b16a0db3a844d71f71232729928d4b022" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="9449ca9b4caf409c077ae449448e311dad2fb96bf1416c3c2d632e5e3534d395" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="5c567d10a15b351626d55f7775c778404c20fa33cec712890a46176e925c89c0" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="c24d7f4ebc742740843555dc8b3211b69bd7fdf5b2898fc273939bed9c6ea086" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="3e9440ef71255b97d468c5396eda584951c4236934dd3d73731a99522f47a9f9" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="a403ee734f245502f047d9f9794359853c9a531f91d9a82ea6018014edf22e28" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="5b004a010d512e3154268e70f1f81c8adb63a15dc2409dfb07b482272c086ad0" name="resource-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="637db623d1ff2618b34a1877fd742738126af28ece6bcf8d50cb68863c7b90d7" name="resource-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="e4c89f50f400dab27daa4eac4e0d3862554b55c0cb76bf9692edb34fcfbcabbf" name="resource-agents-gcp" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="2a5b099e67224764c77c06fd7a68c0a92133c0d011ab1ab4a79e6a264a59fd84" name="resource-agents-gcp" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="27c0a36be8c45bc9a8f3b2b83fb769b425faaf288c1521537e539d77098c6b43" name="resource-agents-gcp" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="2c95a819bfdd01b2dcd8ab17f3a6a2cbdba582143e6f9d2d9d092e17caf2619d" name="resource-agents-gcp" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="d98376dbb0e0b3ebe3f047a82641baec67bf46b9bf2529ddac689ab63a7d33d1" name="resource-agents-gcp" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="391c7737fc9153bf73a4c5da4b6819eede2375b892be63d8a955eba080cddfea" name="resource-agents-gcp" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="b40b1e2e9eccd7dc7e4166a32ddbaffd991aa69a2e85f2c66414d11ba066bb16" name="resource-agents-gcp" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="b9a97ba2f7840afdfb846ae651a7895e17dcefb474073e03d96a984b169191d5" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="1256233334c2e2353127c1b21109a713993d863bdfca8547380bfe812538507d" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="98d292c09a59ad8dbea3b33b2e7088709441fa8bfa7b3cc789657365e2338023" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="2969997a32b31b79b06e49f212b3079c54dbd01b90b6261658e0f8bdd46ee1b6" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="d81d9bd96a5632426eb050445ee4ddcff3d1aec52250cda060f78ddcff839035" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="df9921f165b0f35bbe2535ae2c95863108b1064760f422cc91238949098d5117" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="21d14436ebb0052ac39b9e5fd3d1534904264dcce655e0d4aba3ce53a389e9f8" name="resource-agents-sap" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="2dc727ecd9e0c33e9697637ce19743851f4d0e37e67ccc792e40b14ef94fafed" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="8b0aa0fbd5b63da2e960f497e385fecc44398c2aa9d4e72f2db8550f8d60fa4b" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="336f3de2c887fada68cdd12fbc5d6ba27a9d70014b9126dd260a1c24b3e43de0" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="8a157a758db0432751f2691133d987210be22222b31b04f03f50c990a3e50e53" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="a98887240b6f3d78d02fe10e3946b8f6a3df5e2ca55db8c619477d053d8f21f5" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="b101f9a966d72b2c6847bab7195167e620c366589d032a6997b3646d8e2dc91a" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="748df55af67005b80b00a892d3eca5ce55cf361caf987abf5dfb6b5189504755" name="resource-agents-sap-hana" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="75236367019fdfbff9ff0e7fc8380eb9c3df1e936fd307c89978f11bc67c0ac5" name="resource-agents-sap-hana-scaleout" arch="x86_64">
  <version epoch="0" ver="0.164.0" rel="6.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="0628d50cf8610b56fb4c91546c28848b4e9988693c4bb4eda8a31c12afd9a73b" name="resource-agents-sap-hana-scaleout" arch="x86_64">
  <version epoch="0" ver="0.164.0" rel="6.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="fe57afd5212f729358cc13fc5cdfd9a6a4eabaf265c6d306fe9a9507e62bc517" name="resource-agents-sap-hana-scaleout" arch="x86_64">
  <version epoch="0" ver="0.164.0" rel="6.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="76298876a0c401b2e6bfaf65e0d95fd65eda8c6fd9ae76eb6f314f82ad9aba92" name="resource-agents-sap-hana-scaleout" arch="x86_64">
  <version epoch="0" ver="0.164.0" rel="6.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="4d32b757df4e28466b678545a721628a766beafe40289cd0cb1e0d9d8ad4f7d0" name="resource-agents-sap-hana-scaleout" arch="x86_64">
  <version epoch="0" ver="0.164.0" rel="6.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="d8659b36a9c210c6c9b213742c329d1d060fa4c445c74fa2750c6169f097fde7" name="resource-agents-sap-hana-scaleout" arch="x86_64">
  <version epoch="0" ver="0.164.0" rel="6.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="6a7d634059efddb9e39b446f3c397f5f98f655c0b742d609d7b4bbb85a6a2278" name="resource-agents-sap-hana-scaleout" arch="x86_64">
  <version epoch="0" ver="0.164.0" rel="6.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="f48769f7e6f2ae9c06793efb270ddc54a4f4556cd2aa97ebca8f0a1b61eca80e" name="rhsm-gtk" arch="i686">
  <version epoch="0" ver="1.24.45" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.36-1" date="1588680000">- 1831104: When in Simple Content Access mode, subscription-manager should not
  complain that subscriptions aren't attached (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.37-1" date="1588939200">- 1830994: Fix warning messages in dnf/yum (jhnidek@redhat.com)
- 1823523: Detect rhsm-icon running without psutil (csnyder@redhat.com)
- 1771921: Package profiles sends too early when registering a client
  (wpoteat@redhat.com)
- 1688702: Generate redhat.repo in off-line mode; ENT-2302 (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.38-1" date="1590580800">- 1837244: Fix wrong version provided by subscription-manager version; ENT-2388
  (jhnidek@redhat.com)
- 1834792: Try to terminate rhsmd after timeout; ENT-2368 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="2b3ee6e12bc4235750b1afdc173595fe6e5eee194015dfb6ceca23d1b86ec3e3" name="rhsm-gtk" arch="x86_64">
  <version epoch="0" ver="1.24.45" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.36-1" date="1588680000">- 1831104: When in Simple Content Access mode, subscription-manager should not
  complain that subscriptions aren't attached (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.37-1" date="1588939200">- 1830994: Fix warning messages in dnf/yum (jhnidek@redhat.com)
- 1823523: Detect rhsm-icon running without psutil (csnyder@redhat.com)
- 1771921: Package profiles sends too early when registering a client
  (wpoteat@redhat.com)
- 1688702: Generate redhat.repo in off-line mode; ENT-2302 (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.38-1" date="1590580800">- 1837244: Fix wrong version provided by subscription-manager version; ENT-2388
  (jhnidek@redhat.com)
- 1834792: Try to terminate rhsmd after timeout; ENT-2368 (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="f42b6e7cd7859a6fcada215d1572156068f207ee839e4a5165c0a3b54b44c52e" name="rhsm-gtk" arch="i686">
  <version epoch="0" ver="1.24.48" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
</package>
<package pkgid="754ec48c97f75d3fe7516b1acd1384d1c5dc1455d421c95471cbde49076f004e" name="rhsm-gtk" arch="x86_64">
  <version epoch="0" ver="1.24.48" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.39-1" date="1591099200">- 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
- 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
- 1796833: Fix a few broken fr translations (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.40-1" date="1591099201">- 1725525: Update keys for translations (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
</package>
<package pkgid="7bdcc8f66c8a2144202bfe0a0eb027a985eb1dfdadf717f41c5184f4e2817712" name="rhsm-gtk" arch="i686">
  <version epoch="0" ver="1.24.50" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="82f5649b9728e676bc43d33e81128161e0b25808f68b2120b258623a0ed76b0d" name="rhsm-gtk" arch="x86_64">
  <version epoch="0" ver="1.24.50" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.41-1" date="1592481600">- 1842474: Update local and cache file during sync(); ENT-2433
  (jhnidek@redhat.com)
- 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
</package>
<package pkgid="d8d4a7c7d84a397257c9f7f20b828ba3f3f4739d4ba67f58c03a6cfc1e03b2f3" name="rhsm-gtk" arch="i686">
  <version epoch="0" ver="1.24.51" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="1012cbb6efe0e6ad5e6e25b94ead89133aed97162af7c65baf558c46bf4389fc" name="rhsm-gtk" arch="x86_64">
  <version epoch="0" ver="1.24.51" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.42-1" date="1592568000">- 1848636, 1849074: Update insights machine-id path (csnyder@redhat.com)
- 1796833: Update translations (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="3c8aa4ca06d8885b63f259c6a9f343d1ad9d0c4034fdab587b57700174242730" name="rhsm-gtk" arch="i686">
  <version epoch="0" ver="1.24.52" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
</package>
<package pkgid="feb4ba13f254dcf1ef3b3026d401e4311775c04582f6d02ec3f340f954739b86" name="rhsm-gtk" arch="x86_64">
  <version epoch="0" ver="1.24.52" rel="1.el7.centos"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.43-1" date="1602676800">- 1826300: Ignore auto-attach, when SCA mode is used
  (jhnidek@redhat.com)
- 1850919: False positive log "rhsmd process exceeded runtime and was killed."
  (wpoteat@redhat.com)
- 1868936: Do not print traceback, when profile upload failed
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
</package>
<package pkgid="1a1e635dcfd7f24ddd261a0aa150ac9c1b6ebe15e3cce028b0de0cab73377350" name="rhsm-gtk" arch="i686">
  <version epoch="0" ver="1.24.52" rel="2.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="ea2c1b60cc336e24fcb63425081bd8331458aad0356450d528d83b7e4ef96764" name="rhsm-gtk" arch="x86_64">
  <version epoch="0" ver="1.24.52" rel="2.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="7a2f4cc33953ee8450ccd159a49c4280e2b495bb86f6cc29bb3c20bc176d6f36" name="rhsm-gtk" arch="i686">
  <version epoch="0" ver="1.24.52" rel="2.el7_9"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="2a5e5df3af6ed515fa01476a27b8e9b78c94d892fc98e0fac808ab87bb89034f" name="rhsm-gtk" arch="x86_64">
  <version epoch="0" ver="1.24.52" rel="2.el7_9"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Jiri Hnidek &lt;jhnidek@redhat.com&gt; 1.24.52-2" date="1691496000">- 2229752: Fix D-Bus policy (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="d8797dd8f4bc2f76663d4a406b5ce2b74f14c148d80d667c21c126dc8aefd841" name="rhsm-gtk" arch="i686">
  <version epoch="0" ver="1.24.53" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.53-1" date="1695384000">- 2229752: [1.24] Hotfix of D-Bus policy (jhnidek@redhat.com)
- Collect GCP Project information as cloud facts (chambrid@redhat.com)
- Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
- Stop requiring M2crypto (ptoscano@redhat.com)
- tests: make M2Crypto optional (ptoscano@redhat.com)</changelog>
</package>
<package pkgid="c1f37b7c488ecb90a7d512ed4cbb1cb59706cea1c760d913cd101cfeb9cd7bc9" name="rhsm-gtk" arch="x86_64">
  <version epoch="0" ver="1.24.53" rel="1.el7.centos"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.44-1" date="1606132800">- 1826300: Better messages for attach --auto for SCA mode; ENT-3175
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 1.24.45-1" date="1606219200">- 1890080: Handle IOErrors and Exceptions when looking for process names
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.46-1" date="1617710400">- 1896715: Set proper read permissions on certs (#2466) (wpoteat@redhat.com)
- 1935592: Fix getting releases, when SCA is used (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.47-1" date="1618401600">- 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.48-1" date="1618488000">- 1886772: check is_consumer_cert_key_valid (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.49-1" date="1634731200">- 2010137: Fix redundant API calls to Candlepin (hyu@redhat.com)
- [1.24] Added support for marketplace ID on RHEL7. (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.50-1" date="1634817600">- 2010137: Newer versions of the rpm tooling expect __python defined
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 1.24.51-1" date="1650283200">- 1.24 Add gcp_license_codes to system facts. (jhnidek@redhat.com)
- 1.24 Fix of automatic registration (jhnidek@redhat.com)
- [1.24] Backport support for GCP marketplace ID (jhnidek@redhat.com)
- [1.24] Backported automatic registration (jhnidek@redhat.com)
- Back-ported cloud-what for Python 2.7 (jhnidek@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.52-1" date="1687867200">- tito: update rhel-7.9 releaser (ptoscano@redhat.com)
- managercli: fix RestlibException reporting for get_current_owner()
  (ptoscano@redhat.com)
- refresh: avoid ExceptionMapper in case of RestlibException
  (ptoscano@redhat.com)
- tests: repair attach cases in SCA mode (ptoscano@redhat.com)
- 2097672: Fixed expected message for manual attach case (jajerome@redhat.com)
- 2097672: [1.28] Improve warning message (auto-attach in SCA mode)
  (jhnidek@redhat.com)
- 2097672: [RFE][1.28] Improve the message, when SCA is enabled
  (jhnidek@redhat.com)
- Reverting disabling AutoAttach() and PoolAttach() in SCA mode
  (jhnidek@redhat.com)
- cache: fix typo in debug message (ptoscano@redhat.com)
- 2182768: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
- 2182768: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
- 1928072: Print warning message and don't do auto-attach (jhnidek@redhat.com)
- managercli: add a local get_current_owner() helper (ptoscano@redhat.com)
- [1.24] Fix issue with locale and D-Bus method GetStatus; (jhnidek@redhat.com)
- Make code Python 2 compatible. (jhnidek@redhat.com)
- 2060101: [1.24] Print correct status, when access mode has changed
  (jhnidek@redhat.com)
- ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
- Fix failing tests (mhorky@redhat.com)
- tests: drop test_po_files.py (ptoscano@redhat.com)
- Ignore failing tests (mhorky@redhat.com)
- ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
- Alter import of rhsm.config functions (mhorky@redhat.com)
- Add dependency constraints (mhorky@redhat.com)
- Handle tests in containers better (mhorky@redhat.com)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; 1.24.53-1" date="1695384000">- 2229752: [1.24] Hotfix of D-Bus policy (jhnidek@redhat.com)
- Collect GCP Project information as cloud facts (chambrid@redhat.com)
- Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
- Stop requiring M2crypto (ptoscano@redhat.com)
- tests: make M2Crypto optional (ptoscano@redhat.com)</changelog>
</package>
<package pkgid="c55518f98ad6d5c6b3c696b831d2e72482c235711d78502fbb3806a61114e099" name="rpm" arch="i686">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="6ab174b7bb484a1f308c2c1620e6b4fbd2211970a55fb8809716994e9d31354f" name="rpm" arch="src">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="0bf74d201524f821c81bd9d55a91b38e08068e9e5a11df372154837e1925c13a" name="rpm" arch="src">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="286750205726a96645611b2941406d6dca331671d3e6c3bd7241284b740e628a" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="e121671a57e3073a56f1501492dc6f29340f4ad2bdc5273f34d5bec3ad7ab3d3" name="rpm" arch="i686">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="3aaaa6bacbde30c2c08a6a89dd0af6785dfc05a010b3f7bd1558701568c9c719" name="rpm" arch="src">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="824b95babba7cec701863213944f3bfcf2e04211926efaacd1b74e6c40ba8645" name="rpm" arch="src">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="d358c96e08348c2b642307dd11b8c93a96edd93d0ee2144526d21c18debee4f2" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="d001b771b14d79a020e2986615862316628c2ebef746bcfcf9dd2af7f708ea99" name="rpm-apidocs" arch="noarch">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="d4c8b8d5becba42261473d73ecfec24f806f7835aa540d7bd5e59b613d0cdf47" name="rpm-apidocs" arch="noarch">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="97b49387e26029b86cfc3b62b98e53d56b88080f87907690da98ec8dcfec0f18" name="rpm-apidocs" arch="noarch">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="6221573e91e6265a802b8ae6e945471d201787fc6d5a4489cfbf17cd085bc3e3" name="rpm-apidocs" arch="noarch">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="d19ffd098f4eb6fb529d4d2a2f2987949814c96bcf09c48cd60d770fd81d988a" name="rpm-build" arch="i686">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="6fffd08ed68a492ed711cef0c3f4ed25e64cb8eb02cf7df3e375864fff6ae79d" name="rpm-build" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="c2172370d4984ac743a2c9df723edbf30d517786815ee2a01bffd8a712831fa2" name="rpm-build" arch="i686">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="74822d79eb25d902a7b3c8de276bf6c3532ace28cf91c6b8bdbcbd0c6a5ff6d6" name="rpm-build" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="ad7cec0c947ccbf67703bd6a0028b22c2e914312196a0962683998460cb4bd2b" name="rpm-build-libs" arch="i686">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="c029cd4ebb95c2489e6b0625995e5d38fa22e7391f8ed5623972382f24432043" name="rpm-build-libs" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="498cca9255fefde8287acf45dff1d2128d346bbe50abb85d5e7095bd4ad973b8" name="rpm-build-libs" arch="i686">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="8a53a10e9908e814d11b52ad21fbcc17ba94ecc4691c4adc946f9ba899cbf784" name="rpm-build-libs" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="a668d048d26c23aa53efc6df9ee499191fe0be1e010adec50e319495ae09ca9a" name="rpm-cron" arch="noarch">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="9ae7f99eba0193cede93827893887be39936157aeeec19e3fe87a11f2bc753de" name="rpm-cron" arch="noarch">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="94357b51a3c8b17118b8c397f569657c8e770b67815c8ac4757be4433c2debd8" name="rpm-cron" arch="noarch">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="83805ffaf8903faf8f4d4770c22d6fcef667b07e00ec2cbaf342b3796906d998" name="rpm-cron" arch="noarch">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="6215cd5f8967851625b15a759d616c641574c0f9ddd86738945b25f6cb22eb04" name="rpm-debuginfo" arch="i686">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="5fd0e02b18a9d4bd7c6fe09971269e3f97cc88e6d3676381ecc2c1d57c6d70b2" name="rpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="08b37a5503d54ee944e45df791bef08ef07dca3bf3a001bd3236e53848c34816" name="rpm-debuginfo" arch="i686">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="29db3a8e21a6849c2386af59b838f57c4c485aa817f8f6a80a74ac31c7bcfa91" name="rpm-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="edf268eed1df7491cbef47a167d899753a56de4d7d606b7c4a95dd0b9cc16138" name="rpm-devel" arch="i686">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="724ad895d172298db63d63ded7dbd86c38cbdebeba12d724f484526c40cf22fc" name="rpm-devel" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="a825beeb80febad06cb3558e8d8142fd536111340e5bc8ba509602958e50480f" name="rpm-devel" arch="i686">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="3af7fa6fd9c963dea669d69bf9292feb997e250b4eef8e435f74b4fa57b3a9f3" name="rpm-devel" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="f4425b582e4bc204c0c5537c77c1f9bcc601880d1947448b5a350a8c7d7f7baf" name="rpm-libs" arch="i686">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="1ba22e591316dbb8363e7c124b1afc7818b0a8069e82c7257c560264e2313d38" name="rpm-libs" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="dbbbc57bda26d27a56bb45354cb365927a2e4208bf0dbf98eeefaa5b6209dd8f" name="rpm-libs" arch="i686">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="6848f4af4d20366aacc6aebbd712ca0f4bf8371a8f9c63b3a38f6e4c1bebe8e5" name="rpm-libs" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="2f75a7ea9da28e695fd5c06d01476e6be429a0c2bc267f005f8af05e15e17e31" name="rpm-plugin-systemd-inhibit" arch="i686">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="9c0e087662136870e84825c175f4ef12f2d7fb6559ff8a4ae166bd06f1b1c4c3" name="rpm-plugin-systemd-inhibit" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="62a97e5adb8ad14f39f9c4c7ca25af5b749712321b90da6f8bfc1aa375d96c2b" name="rpm-plugin-systemd-inhibit" arch="i686">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="f928396966e80a09d3bd201535ed217adb4c3574468f09d91f56db6c79828208" name="rpm-plugin-systemd-inhibit" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="9a21fde8b0f41b4be3478f92e6a8fee58f02c9bb5a4c8ac6e8141ffb2f801b53" name="rpm-python" arch="i686">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="b87f4400f2a2d51288991ca3150cda23a47cd514bd22afef9ca619ca71665b6d" name="rpm-python" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="1ebe39d8ca32786449e7e3dba7cda21011d3ad56673b67c82f4b92d198c2e76a" name="rpm-python" arch="i686">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="d8b78ec21c35be7d0d222574b1b8d825eb9e72c71510288d01029ec7bf108192" name="rpm-python" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="ba2b058a8d7fe5bdc4f0fa4c45914b5958d0257d1fcfd27fc0eda0cee48f9c2d" name="rpm-sign" arch="i686">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="255eb61e5d767825c4f2376a28687aad5c1a805899c25b34efda3c389fdb9799" name="rpm-sign" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="df322053b47a89573b7b7f9bd22805b68ec0d248cf66eeb80b2364d83a036168" name="rpm-sign" arch="i686">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="7f5ac7ebbad75c363728cfacbcd1b971213dc99c1be728d7b2984b3ef078f62e" name="rpm-sign" arch="x86_64">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="81dbfd0f1a27176b2e2002273239775fbdfca7a76e3912fd3907235cd5d93bce" name="rpmdevtools" arch="noarch">
  <version epoch="0" ver="8.3" rel="8.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.2-2" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.2-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 8.3-1" date="1346587200">- Update to 8.3.
- Drop specfile constructs no longer needed with Fedora's rpm.</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 8.3-2" date="1350388800">- xemacs is not available on RHEL (RHBZ#866841)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.3-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 8.3-3.1" date="1376481600">- removed fakeroot requirement and all qa_robot scripts (RHBZ#840780)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.3-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-6" date="1585569600">- spectool: ignore query string in URL (RHBZ#1337544)
- Update upstream URLs (RHBZ#1502423)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-7" date="1587038400">- Actually apply the spectool patch (RHBZ#1337544)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-8" date="1606132800">- spectool: fix regression in URL fragment handling (RHBZ#1899112)</changelog>
</package>
<package pkgid="6ed1012cc6ec3c0c10ddfc66e23a68f42e66840a6be8bf9ccff09b75da07b6fe" name="rpmdevtools" arch="noarch">
  <version epoch="0" ver="8.3" rel="8.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.2-2" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.2-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 8.3-1" date="1346587200">- Update to 8.3.
- Drop specfile constructs no longer needed with Fedora's rpm.</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 8.3-2" date="1350388800">- xemacs is not available on RHEL (RHBZ#866841)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.3-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 8.3-3.1" date="1376481600">- removed fakeroot requirement and all qa_robot scripts (RHBZ#840780)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.3-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-6" date="1585569600">- spectool: ignore query string in URL (RHBZ#1337544)
- Update upstream URLs (RHBZ#1502423)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-7" date="1587038400">- Actually apply the spectool patch (RHBZ#1337544)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-8" date="1606132800">- spectool: fix regression in URL fragment handling (RHBZ#1899112)</changelog>
</package>
<package pkgid="b5d0850d9e9096a4b16a2ca70ef602150c2f0cfaf73ed9b5f1ec38a2111cd66d" name="rpmdevtools" arch="src">
  <version epoch="0" ver="8.3" rel="8.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.2-2" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.2-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 8.3-1" date="1346587200">- Update to 8.3.
- Drop specfile constructs no longer needed with Fedora's rpm.</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 8.3-2" date="1350388800">- xemacs is not available on RHEL (RHBZ#866841)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.3-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 8.3-3.1" date="1376481600">- removed fakeroot requirement and all qa_robot scripts (RHBZ#840780)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.3-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-6" date="1585569600">- spectool: ignore query string in URL (RHBZ#1337544)
- Update upstream URLs (RHBZ#1502423)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-7" date="1587038400">- Actually apply the spectool patch (RHBZ#1337544)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-8" date="1606132800">- spectool: fix regression in URL fragment handling (RHBZ#1899112)</changelog>
</package>
<package pkgid="ab6269036c0826120624c3dc2cd87d9c6c46f274373267b1756562ddc915bc06" name="rpmdevtools" arch="src">
  <version epoch="0" ver="8.3" rel="8.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.2-2" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.2-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 8.3-1" date="1346587200">- Update to 8.3.
- Drop specfile constructs no longer needed with Fedora's rpm.</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 8.3-2" date="1350388800">- xemacs is not available on RHEL (RHBZ#866841)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.3-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 8.3-3.1" date="1376481600">- removed fakeroot requirement and all qa_robot scripts (RHBZ#840780)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.3-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-6" date="1585569600">- spectool: ignore query string in URL (RHBZ#1337544)
- Update upstream URLs (RHBZ#1502423)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-7" date="1587038400">- Actually apply the spectool patch (RHBZ#1337544)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-8" date="1606132800">- spectool: fix regression in URL fragment handling (RHBZ#1899112)</changelog>
</package>
<package pkgid="0bfc2a7f370aa1739d1a5db3fb793cc35b3189ccc3bfa3afe0d29cbbf446f185" name="rsync" arch="i686">
  <version epoch="0" ver="3.1.2" rel="11.el7_9"/>
  <changelog author="Michal Ruprich - 3.0.9-18" date="1485259200">- Resolves: #1324754 -  rsyncd unit enters failed state on exit</changelog>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
</package>
<package pkgid="2776827e82b4d33e21e00018b6da7f99ca4b8152fed42af4dc423bc4aeeb8903" name="rsync" arch="src">
  <version epoch="0" ver="3.1.2" rel="11.el7_9"/>
  <changelog author="Michal Ruprich - 3.0.9-18" date="1485259200">- Resolves: #1324754 -  rsyncd unit enters failed state on exit</changelog>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
</package>
<package pkgid="1c70c110bcabe5abe7cccc6270faf6ede1b04f447341f1ea2502bb3059f15752" name="rsync" arch="src">
  <version epoch="0" ver="3.1.2" rel="11.el7_9"/>
  <changelog author="Michal Ruprich - 3.0.9-18" date="1485259200">- Resolves: #1324754 -  rsyncd unit enters failed state on exit</changelog>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
</package>
<package pkgid="d82355ce9d156a212aebff3d1d9f0fdc283200cd09318e2280f89f3582f5c03a" name="rsync" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="11.el7_9"/>
  <changelog author="Michal Ruprich - 3.0.9-18" date="1485259200">- Resolves: #1324754 -  rsyncd unit enters failed state on exit</changelog>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
</package>
<package pkgid="ca0d90c17b2d1763058f98d708040bbf0c1046c8009114dbdf57688abbde667a" name="rsync" arch="i686">
  <version epoch="0" ver="3.1.2" rel="12.el7_9"/>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-12" date="1667908800">- Resolves: #2123815 - rsync error: protocol incompatibility when using rsync-3.1.2-11.el7_9</changelog>
</package>
<package pkgid="0f809514f5bda0a13be03085e8fc6b9c3683e52268263e58ff55da572900ab15" name="rsync" arch="src">
  <version epoch="0" ver="3.1.2" rel="12.el7_9"/>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-12" date="1667908800">- Resolves: #2123815 - rsync error: protocol incompatibility when using rsync-3.1.2-11.el7_9</changelog>
</package>
<package pkgid="3c99de640fdd843402830bdb8f7cf7a1d3697881e351f3e3193400babc1dbf84" name="rsync" arch="src">
  <version epoch="0" ver="3.1.2" rel="12.el7_9"/>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-12" date="1667908800">- Resolves: #2123815 - rsync error: protocol incompatibility when using rsync-3.1.2-11.el7_9</changelog>
</package>
<package pkgid="3a8332c11c16f405beef4cdd0cb5fad9fae8f2cf899843ae478c118eb7bd3504" name="rsync" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="12.el7_9"/>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-12" date="1667908800">- Resolves: #2123815 - rsync error: protocol incompatibility when using rsync-3.1.2-11.el7_9</changelog>
</package>
<package pkgid="cdf65e1ae6c842053f45b9ee69dc751895961f63f1f264b438cc79d03133a319" name="rsync-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.2" rel="11.el7_9"/>
  <changelog author="Michal Ruprich - 3.0.9-18" date="1485259200">- Resolves: #1324754 -  rsyncd unit enters failed state on exit</changelog>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
</package>
<package pkgid="599eaff644ac8ee7c29443bd38e627ff392dc3c18a84dca765be00236e35ede4" name="rsync-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="11.el7_9"/>
  <changelog author="Michal Ruprich - 3.0.9-18" date="1485259200">- Resolves: #1324754 -  rsyncd unit enters failed state on exit</changelog>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
</package>
<package pkgid="8c2bbc826f194d7ced3248be5808129dec584f12f58b6317c57d14f1d809fc29" name="rsync-debuginfo" arch="i686">
  <version epoch="0" ver="3.1.2" rel="12.el7_9"/>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-12" date="1667908800">- Resolves: #2123815 - rsync error: protocol incompatibility when using rsync-3.1.2-11.el7_9</changelog>
</package>
<package pkgid="2b42f94537d220bdd2e9047719e8c3e112344dac870852cfd63a18546a7ea373" name="rsync-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="12.el7_9"/>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-12" date="1667908800">- Resolves: #2123815 - rsync error: protocol incompatibility when using rsync-3.1.2-11.el7_9</changelog>
</package>
<package pkgid="1c1c0c5c8a8a82e399f13e3bf1de383d008dda27a45b3b919d364fe2bfbd5264" name="rsyslog" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="e476bf59231f4e3c30555db88f9d38f9030072198ef9d4cd93145a6a84e02b0d" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="fe0191935b4d8c17ede754dd029c36561dda0a9f2f6824dda547cff744261dcb" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="bb058c5aee166ff4886a3f01c0b0a6841f4536ead1a254e2702fde81718f2b00" name="rsyslog" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="3be1cc043fbd8f557692674cf44d9dced92e2afba6bd7719771443fc5ce59aac" name="rsyslog" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="8caf7704198cd70043352104a502022f77657b86cabe4a3e85d75f77e674cfb0" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="fe434d398a7128f5f54c060973623f9d5d2dd01b45f0503e7accfd80d6524286" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="f8c5f65366531ae168e5e9c2d2d4d11409a5a8986734469b6423ab06f4863012" name="rsyslog" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="575edeb79a08e8ea08e29895fe970afd298707217555ef0bfbab9d77f8d1bf50" name="rsyslog" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="cc9e0ccfb1ec85a69d5af1fad939cdbedba9a401db2269e2cc523072ee251562" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="2b1efaad8a3548570b316212ad04587195d3935c96a73dd751c963d791c2b938" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="322d1a0a49de10609cdbb942d3ccc84a190a9728c19bd68d204acef4a75d7c07" name="rsyslog" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="ec8b8c245187d65114ef60ab17eaf3e7fb2ec0cb32a4a9b25a2819183d545d83" name="rsyslog" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="e6b6cb8554366fd96e5ca68c128a249f2d28a6fb62dcb9480fbd830bdb518a8c" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="899d50b456f46a831e70287e4709fdd2d6ba0f0e23bbf2025d9eaa4a6db62112" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="9663cc9088e3d236f81919c025bc883fc7ced780fdfdcbcd13a85b7483767035" name="rsyslog" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="06408dd77e0d51afa15ccace479e9e5dc7795cc994eb9462b367c2fe6591e578" name="rsyslog-crypto" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="cfd6befd4bf0bb778116292d564e2d70da5f26ec92b735175d3201815dd2f5f7" name="rsyslog-crypto" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="0d832a04b7070f3c990fa617da6d7ea3d9c0d2f9d027cd6654c85277864d143a" name="rsyslog-crypto" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="303fcbcaca5d815a26179509a9ec8675328e7117c39c47a1bf09ebd5d3f04704" name="rsyslog-crypto" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="c6aadb97010814c4151f58a0465948d1df35cb422736a99ea8e41d416151f90c" name="rsyslog-crypto" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="0165e65660e9b7e59eef07abbbda47255fad33f39b66271c504542439f6eedd8" name="rsyslog-crypto" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="522f360722480c2c84abd36a3b6625f7656903b0111260476786220b62e811c3" name="rsyslog-crypto" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="1a1e8fa945e3f1abf265feba4fefd63c58dc75a8940ff7bb2e4778a11bc9ea63" name="rsyslog-crypto" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="05e79744f48455e4edd87581112a0bd7feddf4909a69fa049185cd2d24322f55" name="rsyslog-debuginfo" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="f03790b7c043dde0d1175072592e366596f1c40d0f01ef2b800c27bb42e59a01" name="rsyslog-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="fefd0aab31376d9648e3bd7febc4a6916ffbc73e94ea6580849acecae4d4f780" name="rsyslog-debuginfo" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="902c0d8a4d700b686b4a888e41c105ee8306da7d2038089565899feb949f0c81" name="rsyslog-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="db4158bbf80fdb7035fb1ae472895b7cdd9f0d62131669b061244999a90113ac" name="rsyslog-debuginfo" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="a21495ae8dd457e0e490afa43cf069f374b454817b3a50495c2dcc6f85cd7c09" name="rsyslog-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="f2ca2437301658fcb9ebc0d8d635e310f5fdf03c5a9508d070c7b2acc29f5b22" name="rsyslog-debuginfo" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="d871b29ee455fa41ec39d45dcc004faf7f4d68653286313c29b933b55148ab89" name="rsyslog-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="58820b61cb3a4ebfb6ed2ac323f01cb98052bd8b860c623d40b9c18e740038c6" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="539d4ab30b37d29e909d43ab1e92cc41b1460ea35e408bf5efe82cc147dcdd67" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="ec3666cb33ae63cbf80c5f6943d08d739757f80c283da2c61b467d6b979b894a" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="c36612a4ac948f623ffcc382cdebe28697a8d566b5ae95679a328eecad335447" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="700f7bd4c797c1c79031b4fc987572f62c2552b14cd688b988845550898676c3" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="36e44e20d8e587abef2de250b0e01dfab7e35fbd308063337ade9579fc418268" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="4482b7f059193ca8bb48b56abd125d542fba4d2165585702197c6fbb0373f31c" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="39c9447eb35597834a55ea0f50264f405178e736dcc92464adb8989f828d23fb" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="d23d65acde89f69b1cab9accfb09f9ea49268a296457e1a6a9fbe541991bb21c" name="rsyslog-elasticsearch" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="964b32cbaf61356f743fa43ac5856e4edf35aaa647d1ec1962f684f998099919" name="rsyslog-elasticsearch" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="93ae85ac113fdf3561d35e782fd567cd7e9e42bb41f7d83ca1d26c02869ebe1e" name="rsyslog-elasticsearch" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="db2bb0ad96051f4a96e94b6481134dbd414e12229ba580499e8421df2c468981" name="rsyslog-elasticsearch" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="268531d3263367ae6b00f51b013f357c50ba0280928cdfe3165c1700d1d0e1bf" name="rsyslog-elasticsearch" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="43f8eb1f4ae949e6c27cea92617b0a1a314368786b9d4f4592999a042c2c9b56" name="rsyslog-elasticsearch" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="46d18cf425f02f1dda224b8f52e0e5ec30953f4ef2c2bd0545af411a79b76610" name="rsyslog-elasticsearch" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="056e14fec89520413f11baa30c58cc096f1df0a44348f03fdcd12d5182fc6ce1" name="rsyslog-elasticsearch" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="1d0a6792e38dafa4d1aa662a956a93bb1baf8c4efb695d9badc78b111f060066" name="rsyslog-gnutls" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="248930a03c3b99a8e161ee6d71b848f74efde20e29cba7541f1f804ec4299e81" name="rsyslog-gnutls" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="4ebc177dff19072379b5623eb4f0c0b12983093e20eea47048d80c87334b1636" name="rsyslog-gnutls" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="b048a9b5208874c18cb182183f0b29d87deb29a6d1de67cc22e7306885cb76bc" name="rsyslog-gnutls" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="15461363e53aae470ecea1d1ddb4ca3bf67a75c4894e37fbe9aa7fa434185a22" name="rsyslog-gnutls" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="acb565730c135add51b6adddfb1a1c813b82ccdfe17c61c67a23dbbb38a36bd9" name="rsyslog-gnutls" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="3527c617115b0e53a815a3a203567b40d9b904d72a17fa18b626be7eca898e12" name="rsyslog-gnutls" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="a05503cab7d48eb0d6203441a4a48886c5d84435009cff2cb00b17665bd85740" name="rsyslog-gnutls" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="2635ce68ac7e57ec4245b6a902608d5eae939ee2d3a6744f69a833a93c52bb81" name="rsyslog-gssapi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="c7738a235b0e2661d72d5ae66cfc9ae3ff8361bb588c22b9b9862192caa86c75" name="rsyslog-gssapi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="430a78c2473d641bc7e902116ff90dc4966f6ed9e4738a7ef457b0b7ba549697" name="rsyslog-gssapi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="cc0eda9f674271bd0c036366182d60c9c47ff1d20211b162ad3f7703807465f8" name="rsyslog-gssapi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="6147bd39eef99b134c274baa2396fec73b15fa43fc96d016516d792acad03e17" name="rsyslog-gssapi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="38f0c573635bb7b985fd41e439ba0e099ceee13bb06a2a84709e60e65cb7e055" name="rsyslog-gssapi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="b818cf9a5564c31683470dfc31dc7c22ec87f78042c67af50b6bd202f740ec73" name="rsyslog-gssapi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="34b4c946d7bd9c813c28bc80523620dcf087fde0db3df92c82df15e0f30a7180" name="rsyslog-gssapi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="246fc2011065aee388cde0b775521cd71f3f7f65a7eea551546035f0ae65fa79" name="rsyslog-kafka" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="1b9c9533c3a18682dd143df869d51c424409595d7458129e2726f86f34f41138" name="rsyslog-kafka" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="7768b6558d6d9a90c56182856d10167d1929998e36df32156261febc7ef0e864" name="rsyslog-kafka" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="27bd68a4c688445acd9096752654409d84bd41904e32c1e38638f1811b274e2b" name="rsyslog-kafka" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="092d3b811821262f87f4c8ca9a7c066ca20fab2ff39a17e0e5a6d3398b2e2b42" name="rsyslog-kafka" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="20460eafbdc18ebb1b4e61301e041124b7577d24ac7cc0a04e0829e1b9ade104" name="rsyslog-kafka" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="e9b82f751c41c125976220cee5c78a3c98119fa7518d6c26709dbf4dec630a98" name="rsyslog-kafka" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="7b43e5a8ceca64d534d130ec39e6c36cde0d61a08850985863c4f02f3a6bb205" name="rsyslog-kafka" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="7c4313ea658615bc111eaac131d5059feded2b8890e64724cb8285c48d825910" name="rsyslog-libdbi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="0064bbf70f5348a73d1648d47af7f7576032dc5546af5e0981d945ea0ab582f8" name="rsyslog-libdbi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="8ad0bcb821e831789a8d157d6e65171213dc59cfaf4b6c3e308ad1ef6f71632f" name="rsyslog-libdbi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="108c53c9cc7d5a343d679ed97c84a28dd15e6d1da378721cea5e468e66e9119f" name="rsyslog-libdbi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="e2d19317b13c95ef0e623adefa8b1f9db463471577870969862f653d2f0bdd12" name="rsyslog-libdbi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="f24592893ac3e389698ca16d578a8b2e7710eaf7395366b4fe55a0b951f94c2d" name="rsyslog-libdbi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="e5152cb6153c85a64b4015faca97f463d98df21a871f48ad63296032385c7836" name="rsyslog-libdbi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="4d309a7fa782442ea233cd478b12e136908a3d3fb1cd120a85865c9124550b78" name="rsyslog-libdbi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="6240b2513e71bdbe640e9b70f4490029a970e04d9f3704dc64697bbde1a1d764" name="rsyslog-mmaudit" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="7edd041f7f464c46047f7c9fce34e21be4597a28c00ee78aee68d21cf3de924f" name="rsyslog-mmaudit" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="7a18bd9b98a4f57d533e497614af0af73ae66e865ab89db22f508ec0fbf84492" name="rsyslog-mmaudit" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="806324b0340135db8c22fe8472db1b084b430a24f6bf36bdaa428b0480957e24" name="rsyslog-mmaudit" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="20f87f379794cfe021777eb5a279f1f666920341e45a109b5429d258ad5cc37e" name="rsyslog-mmaudit" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="8ae1f26ea2819767040eeb4c6a044d88cc9345824c1df95a912d2a797fc052a1" name="rsyslog-mmaudit" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="ace534455b22e44f68bd7839db0801e5cd7a12ce43f98a43b9de31d1d4754a46" name="rsyslog-mmaudit" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="6ce10ccd49c78827bc8ec0f34c6d9446454043dff181a91729854a612529b0a4" name="rsyslog-mmaudit" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="da6ba5e63bb1ca23ba444fd1b19175865c59646ec4b5a9e81eb3053b9d7bd555" name="rsyslog-mmjsonparse" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="47e16c2f5ada28edde6ec443c53bd66661acba7225760df0d393902912b4c839" name="rsyslog-mmjsonparse" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="5dd43eb58c054cf2cff2d121ae8428b66831ad77e3012b815cddcdc63e71f851" name="rsyslog-mmjsonparse" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="28405be8cffbcde444fb17f19f15535f936b7a45f71c5fb5dc29ac2ed60a2c23" name="rsyslog-mmjsonparse" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="c14baf6c539c0b88172e7a933bb30265f7c3c6534c168f73d84e345c9d53ee4a" name="rsyslog-mmjsonparse" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="94cc187e0c1cc4d535d772f0b272885091dbb20ab87f3df1f88b880d8acb6df4" name="rsyslog-mmjsonparse" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="b009ba1011080da8e019a72a81443e168e251960cc909d873c7327d59ff6822e" name="rsyslog-mmjsonparse" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="3d3fd68005434c9ca2624d4f4343d90b5bae3793505891b4629a7660b3615490" name="rsyslog-mmjsonparse" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="6bcbd5b438680fc2da4fc645ffe63dc0b629fa989cd9dac53598210485024243" name="rsyslog-mmkubernetes" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="8dd92c0054c6e7371e5f7822c34c6f8258aafd4801b45bd04a5d8863471ef230" name="rsyslog-mmkubernetes" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="6e0e58830519214b25738b728105e09b88c3055a02cefb5d227635c18a132f29" name="rsyslog-mmkubernetes" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="55d9b735891434a2d763e8bc012aa58f1dc2070c47823aa1cfdcbd555e3cffeb" name="rsyslog-mmkubernetes" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="2d056a1695b266127adae463447b7dc38df4b26980484eb21e37c3302d44008a" name="rsyslog-mmkubernetes" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="cea365ec6d590e11fb3c5f66f26c2ac644df98efbfb2fbf2b9b1c4151783a1c8" name="rsyslog-mmkubernetes" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="d93a60afdd5c462774de24ee3d780dfef27d62e995ac6ef054c009b44b57d256" name="rsyslog-mmkubernetes" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="4a578db7b41b0792c5817b9301bea5f36716604bcdb6cfb9395b23b2c517ee68" name="rsyslog-mmkubernetes" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="1de77f155c032e634021ae32725844991d063dd12376e1f191ae22014327cd89" name="rsyslog-mmnormalize" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="766f6b7be60658aa5ba2e16b71bf9e6fe9f61337134aedac123eba8108abdacc" name="rsyslog-mmnormalize" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="d1ba1b70ba9e3ad2972bc2fef792a6c7cf466e7054a95da1e452c80ba48143ab" name="rsyslog-mmnormalize" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="07f5d066886121bcc3ed7c4a3e43f2375f7788a180c3ce15104988ab4a4c2eec" name="rsyslog-mmnormalize" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="4d1ca0077a74807f655818753807587dbefaa1387ff67d181eb39f435ed9ac3e" name="rsyslog-mmnormalize" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="02e91d0bc9fd3bf0376f904a76eff47857b719d59c66e1034b0c15a3d6d6425b" name="rsyslog-mmnormalize" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="bdf7950c5be4c296cba5b1db2f08665b56ed02aca12a513c64feee74020a8cda" name="rsyslog-mmnormalize" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="8d682419762fb94c93ab4dd17c544360cbbdf09e6afbc6fc439072a67af0fd18" name="rsyslog-mmnormalize" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="5aed5ba5959345481bcf75180a3404929a97538789981d9c86902a15cfd6e3fb" name="rsyslog-mmsnmptrapd" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="ff809e672f067a6e04e2a244cd31d07be4be036876b80aa919872cc3476826c4" name="rsyslog-mmsnmptrapd" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="319e9d1c8a13944bc167fb67a01a0b44a9c4e05c947839b8c2e636b07038938f" name="rsyslog-mmsnmptrapd" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="edb454e742c3f48afdda36cc3f483b7f0a45af120d8cf4bb69c28e11cc21235e" name="rsyslog-mmsnmptrapd" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="83518ee74c897a6337dea7492ab208eae2e173922a18586f9633b519623c052c" name="rsyslog-mmsnmptrapd" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="09aab4fa35f90b027163dd79f37b4d8ce8fd1284d84d564af36c729b3ac34037" name="rsyslog-mmsnmptrapd" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="0f81a505d2ae84fe2a2e4b6568023f5dd993fc52b0b24735573d73475a0afc7e" name="rsyslog-mmsnmptrapd" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="e1f9e60a105588a9a15ef442c5e2936e356d98a70d69579a034b543f3ec631f1" name="rsyslog-mmsnmptrapd" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="8863fe4ba76e9b1655956b62dc4d8e67929415675831b39234e7ad28873d965b" name="rsyslog-mysql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="5f30072262d1671b1fd1a418b11cbe9177ca07b8f959903d35a596ae9f6a7d57" name="rsyslog-mysql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="efb76011b5a9acf6c71026d4287b57b3338d6900390e619be32cde010df00497" name="rsyslog-mysql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="5771016f1c049c336a7fb6065675f556276606574b4b66be7b25d86d4db2176e" name="rsyslog-mysql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="ad3ae21394f9e3d9d538932281aecc2ddf23994434824b9a80a50fd7ebb01bea" name="rsyslog-mysql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="591bf38d91340bd52b27887801348b4c2c9a9854d2578f4f4c932062af2a32de" name="rsyslog-mysql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="e6faac7436ba082822f87466b79f0beaa96142d7dd3cdade1377f1959b65c425" name="rsyslog-mysql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="82d9f45bf15132f7163643c2482662a4ec6d6a049898b2519afd3b484d73e09a" name="rsyslog-mysql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="cc7959dacce6cb95ad92c68efa785de0dd4fe46056c9deec0f4ef74eba457c22" name="rsyslog-pgsql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="e8d9f08771c919a6bcd7f37ce2e386efaef343363f218a3768cf40d1b72b4643" name="rsyslog-pgsql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="f333d3fc146a967a8f9978bd6287e25a16e7e179a24f3d080648b589b6dc9f17" name="rsyslog-pgsql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="45905332043efbe7357f7804692ba390500c4473eea24e9ef6631f6e8af2714b" name="rsyslog-pgsql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="ee683233b54852d79d175be1deb911120c1ce6f612376cb22d8382d6c3534f72" name="rsyslog-pgsql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="53a06191831b9b1b6b2606b33763e1bf88735e43417fd556931ca9aa1671e727" name="rsyslog-pgsql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="74ddf46d647ddcb21e63c7ee5c0a89de5b25e6c5aeb2603453bc03b3de016cdb" name="rsyslog-pgsql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="6e33c7cd1524d48542164c794573fb9803e04cb564d0fc57394fb239b5e851a1" name="rsyslog-pgsql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="d7f22a4ae9be7b17dfe397699ae0b75a0395eccbd69d248ca37f80491b44160c" name="rsyslog-relp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="3c32b98b2f0f415c1df04af9896a7a3b0ada0b4061831d1eb5b5efe0fec874bd" name="rsyslog-relp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="3bd04dec21107ad6a1abace6eefc94f646cd1cc2c87a19406370216215595284" name="rsyslog-relp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="1945819f2ffaf0090c6e22a724d15ec8d7e0751113feb50a8bb4c9a2b1d1db74" name="rsyslog-relp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="449108949f17de71ef7c5d7929d715d2b1fc14bfd6bb369a426405e84c04a8ab" name="rsyslog-relp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="8075006abb3efadaac5ddf07742835daf01a50865abeac61762e590c4edf703e" name="rsyslog-relp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="b0c4fdb2fbd3cf210c58b4bc67969d74f430f38ec5d4d3cd9dad326709ed342d" name="rsyslog-relp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="28c00543cd798928cdc906f87621940b365df4e70501390c202bc2e605844b22" name="rsyslog-relp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="092d2a60531e0b495f51e62879e7720fd94a69b080a246ac344fbb983d9fadd0" name="rsyslog-snmp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="bb259158e259a0d33782c4bef42d06419308864f512e34096cfbb7c118df5be9" name="rsyslog-snmp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="f521a0c0ebc968e9c0def71c030fd66dc9672806a31a33e2cb287ff08f37d3b4" name="rsyslog-snmp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="c33b6503732e0e54cb56a7451a2daa527411e435ed9c2e21acf1f72d633f86b1" name="rsyslog-snmp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="825fbba260f04f73341d8a3c93cad214caad2d84c1dc0088ae3b4dc82d90b456" name="rsyslog-snmp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="bd557bdb8ded37260481e3688af2f0c78b2a01a0c58436d1b0d0859405eb0f42" name="rsyslog-snmp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="4cbef57f2a288b4c4fee082c63d51a2533a3967acbaaacf6a62611439e96a2fb" name="rsyslog-snmp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="18478257ae7e4f363144fcfa8a0ccf194097b8fcd230d096477608a36b326512" name="rsyslog-snmp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="ad3559554b49eb75df3dc4ef5809f9d4a603e14e0233d8a7e3f81f308887d164" name="rsyslog-udpspoof" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="5c6e8db9f674c049988a4d5b57da4c9f6fa5269e94cd8b9e35c4132edc9bd120" name="rsyslog-udpspoof" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="32badbe03a2e1796e1f4020558da771bbe7ee0e6283513aa4021fdca2fe0cc7f" name="rsyslog-udpspoof" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="62500f02009385e91927a81598527336885b65830f71240fd6ef83cfefb5aa15" name="rsyslog-udpspoof" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="499e49811f3459e13489a322c9894d3028906aaf71156feffe36c2d72d31d577" name="rsyslog-udpspoof" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="79f613e2c1abd474c4ad3c64215e2b1e7e4b50e058ba9b519aa62b11cd971aca" name="rsyslog-udpspoof" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="6cc768691f3c365b27c8018cff3e5fc08e003cdcc566eb1ef38d67e9aab6b3db" name="rsyslog-udpspoof" arch="i686">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="4eb1f47ec20f78b49275526afa9aa64e4f18a27818069e9a6cf38c8e500d8d58" name="rsyslog-udpspoof" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="57.el7_9"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-45" date="1565611200">RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
  resolves: rhbz#1696686</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
</package>
<package pkgid="d5f65bd963cdfc8495367f9adc0fa5876dd27e4acebda93d1c64d6602b102e18" name="ruby" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="9f1b01e6f152f207ca84b0c3aa28bca063221039fe119a7bff2a2166e5939864" name="ruby" arch="src">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="f4e9bb91e3ca3957f137e132e6ffab54980bc76626ae4bb9d657a3177b617168" name="ruby" arch="src">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="0301e4a175ab43af45c8bd0da6dcc7d897bb3385572a3bf0a7a022323d93edcd" name="ruby" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="4c8fb5e2f682190f80165e04beb1b3e32d7bec9c8159c312e4bbec3438e0a2e5" name="ruby-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="c49176d6544391d03c6bde4440ce265c12e32a4e8ba7eb2faa902f2857b92c57" name="ruby-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="d4ae66a5818c663310d645734b4cd6bb78725b8490fa5b620cca23d8bf9551df" name="ruby-devel" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="76e2a24e22c8e17793baac8c3e74031220268aaf380852785bc8fcfa9a0ccbfb" name="ruby-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="efe9d42915f9fb1e47ec7026a0b6d1956f6e1334119e16b45b38da9e3e0d60b9" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="60cedb1b66fdaf4c747726a11fbd00da72a0aa50c82170122609a3a7ed3f6b03" name="ruby-doc" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="1cbd05d1b7234f5ee29dbd3115f4ce380d1e7dac0af4a2dc9a9cb67af4a10008" name="ruby-hivex" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="a37e6fd19bfaaf27ddde5333fa780983a27be43a2b12d205dc7236bd4be2c75e" name="ruby-hivex" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="205e4b7138cce6d40596b4de02eab2d7905cc9f0ce8b4710d1e9f0fa59cbd4d7" name="ruby-hivex" arch="i686">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="4150d99a2e05275a7fe61262584d89ef67f7f22f2ae96d2baa8dea6e87f1a596" name="ruby-hivex" arch="x86_64">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="4957f6ec5813e27ae531d3d28df93ddde861f05b7906edb7f1c7ba6b3bce9ab3" name="ruby-irb" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="acd351ab578fd6b9c5c384ced70b63fd1b8d3ac27170de74df534fb083257408" name="ruby-irb" arch="noarch">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="a97d3ec0835127ce3eab68cad9111ac0d12b341f8e35a7d05b4d2d761b0cf5d1" name="ruby-libs" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="340611b7a86d72d7f31b653be7d2c81d09a807e3fa0ca85c8f5d45b1c4248150" name="ruby-libs" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="709e20c9bef6d3ebd055006fd2c2f260a6ebf6955cea3e8ca769549f73691372" name="ruby-tcltk" arch="i686">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="1550073d29d601dcaf119344631f90b748b826980ae3176d95b177f47267ba3a" name="ruby-tcltk" arch="x86_64">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="a1b60c7afe8c2314322e43ee9fe9e207f16efe862f88ce2b87199f9f131f106e" name="rubygem-bigdecimal" arch="i686">
  <version epoch="0" ver="1.2.0" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="ddb3eaec4f1dbaabdbd6bf4bef185d8b743629eb1f36fea1f97b9c27b15976e7" name="rubygem-bigdecimal" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="307e76ea680ecf36da276f956493f42dac3736823e5bce82f4ec3b940072cdbb" name="rubygem-io-console" arch="i686">
  <version epoch="0" ver="0.4.2" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="69dd6bf41a74846c0eba77cf57e92b7dba95a4da6e120944228e50adc8b14449" name="rubygem-io-console" arch="x86_64">
  <version epoch="0" ver="0.4.2" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="5dfca775b215755a0fa77b407411333130dc77939258f6da0cad07ae1919f9c1" name="rubygem-json" arch="i686">
  <version epoch="0" ver="1.7.7" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="a78d65af2d46dbcc4366fb2601a191a90855ff243412c3ad45fe33649830b536" name="rubygem-json" arch="x86_64">
  <version epoch="0" ver="1.7.7" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="56ece0d06b39ed53a4017dfb34c43eeabc9308995d02c4ed8d4437a68b8b5588" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="103d6d3273c2dffd8a489b00925390a56be2fa1822a41c2e780bfafe85890296" name="rubygem-minitest" arch="noarch">
  <version epoch="0" ver="4.3.2" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="d43753fd143110df5f6bfbbdc7d38cb07dae47e5f0ab59b17fa0a0eba48d81bf" name="rubygem-psych" arch="i686">
  <version epoch="0" ver="2.0.0" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="15eeeb71cdac9b41933e6a62e21cdb01c4cada95e011ec7ac29d643f1d2462b5" name="rubygem-psych" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="30ca1b7bdc7f62b802e6e873084cc86e7ffa0e58b36be19d59a99292da8b6611" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="39c8060c055ddc40b9ba1e38e71b8301daf2fd3e9f89e4184dd188091bf89b51" name="rubygem-rake" arch="noarch">
  <version epoch="0" ver="0.9.6" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="e878de26dcb5970b7412b55bc87c0b4c82a0def3c9619f163b6f0f40d44aaf37" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="4535869aa4dae737310c038c1cf6404d135c0b265fda886005b8568e8f02c9e9" name="rubygem-rdoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="3921a1b84a035eaeccd08d126b15c1f22bd00250b92f0209065672c911e17090" name="rubygems" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="49a7eec1c034f605b69e245622fb60aeca0ab22dd393b1260168e80bdef5a3ca" name="rubygems" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="765dabf1ca811170b89a7f480e40c7779bc480e63655d1e45ba913f4631a425d" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="60e9c2ee059b90aece770ede351c120eb5bd4b3bfc68c1ff086a11b83faa4279" name="rubygems-devel" arch="noarch">
  <version epoch="0" ver="2.0.14.1" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="2fb36c71b96ff423fafa116ca7f8f2912f1f39a26a88c15fa69537a87800da6e" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="7a24f2e41bd62b34f219e84190d742d8f12a72a91dd9ef90229ba50505653ed3" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="4dc0d4bc532085f2a62cf71745f40280a19da876e6d7bbccfaf827857aa698f5" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="f3474461f2be23ec564f4546fc47f63ecc811a47ec38373aa304bff49471eb11" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="0052398f5d04511a2bbb6802b9ad4023a0cb753037ac5edd23216708bbdb445e" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="6edc1a05359e0d09d311cbd40b4b2b2bd9406cad71cbfd673cb90c3ded712d0b" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="bcf5f62df11634da03cc6b878cdc8a8bd8866ccbde6128bbce4831980d2a8fc8" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="17cba797f9833311c945f4f1bbea7246a0a10927859647e8bfbcd2f59ca89a31" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="05d4ea9bfd7d93eebff3b465f5739bf5ccf608d5277afb1f15844cc69e86a9a7" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="4bc6f9f1a0035bc5414bec072d463015e24331591ef6e7c016ccf100ddf5a9c2" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="83930318d7022e8611dacbf3c40e97974a06956b43c6ff11609c7d9d755144f3" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="72d2d8293d3fac629a4cfb2d0708961b0f20eb61b3939d7f05c6d8ae6d3f005e" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="59e41acc58e233a52a975ec1e2d757b629f32544fee3da077dde3083feed1f29" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="ec9e73278b0f7df57168d8de8303bf38cf43093bf9027f6a2efd4f10343b2fe3" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="e7fef3d1cd0983c2f879e2a17b82905557c21b913312065d0b71c75dbf3f5213" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="1c0bb03ad519e454509b94d0bebd55c68a46fb6a3f805b067f07c16ef0876c1f" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="41bb500fd620dca05d7d9d9daa1bdd2b65eba5ff792620c25851af8009567c12" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="235f8503a1c81878b86d3a3ecdcc6bcc9ce82128f65a909fe2949e6816b0b706" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="6d45fe9438300139d972f7c08da44a9a3e259768d78f3bee46971cf2a94f7265" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="5223913df5876a208e24a782771642bce9bac56bd97c6120bbeb1b0b4145bc55" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="18de62e228559df6d535ad594d8fdb18df4128e58e27dac1c42b3f5b30b570d8" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="7c400e9e34cd6ed02f992232ab6d0b31f3114c319a1d0eba88f263730cc8cafc" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="cd5df5718a58e3c0ce9e6c6a7ae525ae3cf461bbcffbd25ba56629b37e1753ff" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="948eeff25967ec3d79933b84c55e959526e7e66ae8184440c8ba4810450113cb" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="db13689dfdb02d78ab961d459b8c319aa28a40879eee43443803e151e0f2c529" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="a006449c00d904c827f083ab91626bc5c5c16aeb6f6aeaa084da5f4381831a64" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="df4b0dc167b376963c9ca7a1495a22fa460f4d8096310ec537ecb35dd8bb024a" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="21bd40577273b88dbdf98efef7476f7e71c05faf13d0d09cceafd173e075f37a" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="c75e3e95c3367e5c6353bee088b12c53155c05e868fdd34301c556d1bae8f3d1" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="e636f9b926b08ae6bf65742ee2e92b511a830b4775311abdf002d48ae78e8921" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="d79e14df1aa29749baf270994d3d98f1caff0a87850e80e514e24a123dc627a6" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="78e353b011de2a0fe2e45fda7a0c23b9284e420b2006076847d9e2afc1e91d3f" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="66cfbad66a368f8310d3f6e4ed6bef457bf0581dcab446dd8a0ef321033b9cd4" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="189d10ca5aa5a6ce353425ee8b00e0effcca7c2aeca34d005f4913047f7733f6" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="35e1034ec167b7b8703cfe4ef7d836f904e8ca8f6aa9c0e183ca14f663d6da7f" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="174215ae6c94ca876769fe897780e01f04fdec47676318c5ff6f01d363a13977" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="b723f46012cdc9f5d5777318f25baa3295658099bf22b56446c00e2ca1074929" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="336cbba3a64eab1be3a2335d446e1d70678a40f8f2e13f8b59588eced4481055" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="d05d5bcc44e078b87c88623d6d87ed820c14e27c864f233ddc466e7ba49479a6" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="975ec6b63c34771c3173b86d824a643ae9af7b144bc0d69e8447bbea3cfc6cc1" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="8bac991bba41387d6f72707f39bceba6ba23a8d8ac13d59b339ad97260ae1f34" name="samba" arch="i686">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="deaece5db0fe7536fa019851628114de4204b7809b94595d79f756924fa7eed4" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="e7bbec5b08c3dd4c9f7edcc858c20515114878965fb654e4f7707f7ebb31fbdd" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="53874f0624a862e39ed475be103e3b78c3c8e67d7bf180834fb5ca82100a941b" name="samba" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="e45b4940f9f05b737bcf54757bd05daf09899617db981961398e216c18517156" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="746ac4ffb9743d6177cb694f4c9c25ddc7190dab306994166b637a4eda24dd25" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="624b4361e889226f0c59f1d7a209cdc25d2a6b76d141195240a430a8ece3778f" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="97a4c4fd37e1048f69e31a09e71b3c404765f5b23277d9265f4d76157c7ee89d" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="11be4503133bd3c2884d2cf148162ebd8385ab95c511d63267ef136cafcc5f06" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="d8308f895d68aac892d3efb55215ea92431e6a14b2415772e628febafd30d425" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="3a5f76bb1af604d6bd1e5be90b1ce305231ab33ecc033444c32a748568480cc1" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="4ea264dc426623ac5e7693366ecacfaef26632188be8c00352d747c287159cd4" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="9b28ed7527401bc6daad8958ff4291e1848ee3264d4fe6a60e6a7f5335fbe38c" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="cacbf2240efd5a4dbe287b3e13c5c954f7667967cf620451c3d0e10ee4e1ea12" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="672ef08cc2fc47a9570088ad07cc34299e66eaa8ad19222006a6fa33e359e19e" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="38de8a622c9783ec9d2b191e6493086b62b29bed9349780e5dd2a7053aed3224" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="7b3a46aa6226515635734f348a3331f78fc6d801022bbc11270f8c4d18943b19" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="88542a7908a441f72411cfe4a3e783af7dc9a32431aab7d49b91a9faecc32b4e" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="29ed2151386034afe13c26fe2378a523a5f8dd067d71447fcb617a30a51631f8" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="45bf5ffcd93802d73704fd990d9eca67a75b69afbf5e602140fb8041072f615c" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="553698c9dbbde0fa51f48d2006b128559bbb4bd5c926efd1975cf128b878384e" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="ae57df4ac422f929741bc221d2404526ab8dbbc6b06316a6f39fa604d8cd11e4" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="7aead8f3c3a32b8627761668eafc540ec83207880e112baf4242bbe5bc073db6" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="6a4a46287f288ea4a269aba45d2de93e9a82771836bc9321f10765c7de8b5655" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="7aadbbcc4ee4af519c9d0ad5907fafc43c662c0ae06f34377029675dc41c27c1" name="samba-client" arch="i686">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="931367e4121b4fa9392de82f939e0fd890f3a01f6bd11554ec17e840da3dfda0" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="a17a12753dd372e2135218cfef88886340ba73d75bb568ba505ba20dec2e7de2" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="13fe35a53594550d513f85629f8be3d044a49c15d428a3ce8956ea169a1ba039" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="69e41136b536cbdb1740b573ff027b920a3676a18f96e4db7f8e5d9555653281" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="92f35a65a6f11d46503a18ad4951c4996a752517af982c19400181a5fd4c041e" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="66ccc4b4d0cb2ab62930b0aae0cd28410bd16cac2e900d4f7e2f158f12397e99" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="9b332597f1c521747e5d672bb3851ec96e05c6ea1bb855233557f4a56215d115" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="29c065ef9f0e9b29272af9189f8425a29a7804186591a23a9a8711f31d05ad5e" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="ca8a6d729b4253a2d72b1d1faf6c9bc2e01f124713e09ef4d6e593d014871010" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="ac1b342460bbd318f1f64f29443b80425d296f2dafadbf8d38c19adaa1bc5629" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="f2017621a1bbbcdf9558469b9349b0676242504811d7051ee728b221a23d347e" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="4c17dfc101ca5991ae0e223b7ef9fc29947f88f1ba1cfe2e93b71dcf79716f8b" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="8f253e9cc18b496593fead8926a340f9d54b93f7cf9b4b0b40be3640be032bbc" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="2019a9f97ea42ca969b6c9217ba08b4f003dc77b6604c5f23068f4572df2e41d" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="6d62111eda96d9d48ca78f6ddc776072197a1c482dc158dcfc76a9ca7f64518c" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="ec2a2ae97716eab51cb5f5cd37bc3dc715ee0ed9d82525a6448b4137875dca3d" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="a9e170741280db60ad91a7ec3bbbfb46d0683c70cfa97ef6390a8b749802faf1" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="6335a7c0b6a53690a5391425a7518bdb4e57c94b45e9a12064343e69b542027e" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="9c9cc8c4153063bed87f498950b0e3dc06d9861218c300c41bc42ce1ceaa46da" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="e112832ff845c3b9e9c095f87dae9060a8c6a18d4f5fef3098747f216431ea8a" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="43820cb1d2addc4b28fbc793c3d09d1a71b57e34eb382bb836df9028e2ff1b8f" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="7.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
</package>
<package pkgid="a5e0d7795a7a9a440d48d6a0b43dcdb0afed870c126f0cfc2d89e198153cc177" name="samba-client-libs" arch="i686">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="dee6030a0573f0f295e772fb74cde18342667f5391239b2877d374fc62868aff" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="5e0135c69b85b9e6c6c975b91e73c0ccc2ca5a42407033fb35c3c8958f15417b" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="8e6f38a82f4e772a2810e08473893ab699a88ed2611259c5e051af839ee56f15" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="90233bfd913ff2ceec8108e2fd3ef7f7634a9b01f5e46c39c3befa25f57d2c1e" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="3a1d08b4db53a91e2c4152fbb4c7d920c45b30e1c14297840587e1f613f1eb72" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="55e987e8e1c07a93bb6978439806935a7d609ef7eec243cefc0915441fa1888c" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="A
[file cut: first 33554432 bytes kept]
[document cut: first 32006811 of 33553101 characters kept]
